Job Description:
- Develop Security automation and APIs in the Public Cloud across the key pillars of security namely IAM, CICD Security, Security Logging, Incident Response, Data Protection, Compliance Validation. Security Analytics, Vulnerability Management, Platform and Application Threat Modelling
- Collaborate with Security Platform and Services teams to build and integrate existing security solutions.
- Act as an advocate of information security policies, standards and as a mechanism to enable the business effectively while managing risk appropriately.
- Cloud & Network Security Architecture Review.
- Perform unauthenticated and authenticated vulnerability assessment (VA) assessments of servers, applications, network/security/infrastructure devices as per defined frequency annually.
- Perform penetration testing (PT) for internal and internet facing servers.
- Create comprehensive assessment report with details of vulnerabilities identified, categorization of the risks by assessment of potential impact and detailed remediation/recommendation for all the identified risks.




- Provide technical assistance to clarify the reported issues to the relevant teams and provide required support to resolve the issues. Explain the issues in layman language to the business teams.
- Hands on experience in automated vulnerability and web scanners (e.g. Qualys, Nessus, AppScan, Web inspect, Accunetix, Burp suite Pro, etc) is desirable.
- Technical knowledge of Windows and UNIX operating systems, networking, security & network devices.
- Gain deep security-level knowledge of cloud environments, continuous monitoring solutions to understand and explain security risks and mitigation techniques.
- Robust knowledge of the OWASP Top 10, SANS top 25, WASC security Standards and detailed knowledge of common web application attack vectors such as SQL injection, CSRF, XSS, Session Management issues, Insecure Direct Object reference, Click jacking, buffer overflows, etc.
- Strong knowledge

📌 Sr. Cloud (Pune)
🏢 IBN Technologies
📍 Pune