Senior Security Engineer

Full Time

Bengaluru, India

A clearer role summary, responsibilities, and application entry point are laid out below so this page feels like a destination, not a placeholder

Role type

Full Time

Bengaluru, India

Role Details

Relevant Experience: 3+ years

Role Description:

We are looking for a skilled candidate for the position of senior Security Engineer who is responsible for designing and implementing security solutions, conducting security assessments, and developing security architecture frameworks for 42Gears products and infrastructure

This role includes significant responsibility for designing and implementing secure cloud architectures across AWS, and GCP platforms

We are seeking a strategic and analytical professional with solid security architecture and infrastructure experience who possesses strong technical communication and problem-solving skills

The role requires the ability to work collaboratively with cross-functional teams in a dynamic setting

Design and implement security architecture solutions aligned with business requirements and industry best practices

Conduct security assessments and vulnerability analysis to identify and remediate gaps in existing infrastructure

Develop comprehensive documentation, including threat models and architecture diagrams, to standardize security across the organization

Collaborate with cross-functional teams to integrate security controls directly into the software development lifecycle (SDLC)

Evaluate and pilot emerging security technologies to maintain a proactive defense posture against evolving threats

Mentor junior team members and lead security awareness initiatives to foster a culture of collective responsibility





Architect secure cloud solutions that ensure continuous compliance with organizational policies and cloud-native best practices

Perform cloud hardening by evaluating infrastructure configurations and implementing rigorous security benchmarks

Oversee IAM strategies across multi-cloud environments (AWS/GCP) to enforce strict least-privilege access and identity governance

Automate security guardrails through Infrastructure as Code (IaC) to ensure consistent security deployment across all environments

Design centralized logging and monitoring frameworks to provide the visibility required for effective threat detection and response

Integrate SAST, DAST, and SCA tools into CI/CD pipelines to automate the detection of vulnerabilities in custom code and third-party libraries

Develop security blueprints for containerized environments (Kubernetes/Docker) covering image signing, pod security, and runtime protection

Define Data Loss Prevention (DLP) architectures to monitor and control the movement of sensitive data across cloud and hybrid environments

Map technical security controls to regulatory frameworks (SOC2, ISO 27001, GDPR) to ensure the architecture meets audit requirements

Critical Skills/Competencies:

Security Frameworks: Proficient in NIST CSF, ISO 27001, and SOC2 control mapping

Cloud Architecture: Security design knowledge for AWS (EC2, S3, VPC, Lambda, IAM), Azure (VMs, KMS, Storage, App Services), and GCP (Compute Engine, Cloud Storage,



Identity Management) environments

Threat Modeling: Expert in STRIDE/PASTA methodologies and infrastructure risk assessment

Identity Access: Advanced IAM governance, Zero Trust architecture, and JIT access

Container Security: Hardening and orchestration security for Docker and Kubernetes

DevSecOps: Integrating SAST/DAST/SCA gating into automated CI/CD pipelines

Network Security: Implementing micro-segmentation, WAF, and API Security Gateways

Data Protection: Centralized secrets management (Vault) and PKI/Encryption standards

Security Observability: Architecting SIEM/SOAR telemetry for high-fidelity detection

Application Security: Deep knowledge of OWASP Top 10 and secure coding practices

Compliance: Technical auditing against FedRAMP, HIPAA, PCI-DSS standards cloud security assessment methodologies

Certifications (Preferred):

CISSP (Certified Information Systems Security Professional) or similar advanced security certification

CISM (Certified Information Security Manager) or GIAC Security Essentials (GSEC)

Cloud architect certifications such as AWS Solutions Architect Professional, Azure Solutions Architect Expert, or Google Cloud Professional Cloud Architect

Kubernetes security certifications (CKA, CKAD) or cloud-native security certifications

Experience with enterprise security frameworks and governance standards (NIST, ISO 27001, SOC 2)

Ready to apply

Keep this role in view and open the application form when youre ready

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Security Engineer (Bengaluru)
🏢 42Gears Mobility Systems
📍 Bengaluru