Job Description
Role Summary
/n
The Security Engineer is the day-to-day execution arm of our security function. You will run security operations, partner with software development and product teams to ship securely, harden our hosted applications and cloud environments, and respond to security events. You will translate the strategy and standards set by the Security Architect into working pipelines, tools, and defenses, and you will be the first responder for anything security-related across engineering and corporate IT.
/n
Key Responsibilities
/n
Security Operations & Monitoring
/n
/n
- Operate and tune the security monitoring stack across AWS, Azure, and M365: SIEM, EDR (Defender for Endpoint), CSPM, and cloud-native logging (CloudTrail, GuardDuty, Security Hub, Defender for Cloud).
/n
- Triage alerts, perform initial investigation, contain incidents, and escalate to the Security Architect for major events.
/n
- Maintain incident response runbooks and conduct regular tabletop drills with engineering and IT.
/n
- Run vulnerability management end-to-end: scanning,
prioritization, ticketing, SLA tracking, and remediation follow-through.
/n
- Manage threat intelligence feeds and translate them into detections and advisories for the team.
/n
/n
Cloud & Application Security
/n
/n
- Harden AWS and Azure environments: IAM least-privilege reviews, network controls, KMS / Key Vault hygiene, public-exposure checks, and CIS benchmark conformance.
/n
- Embed security controls into CI/CD: SAST, DAST, SCA, IaC scanning, container image scanning, and secrets detection; remediate findings with engineering teams.
/n
- Perform threat modeling and security design reviews for current features, services, and AI/agentic components.
/n
- Run periodic application security assessments and coordinate external penetration tests; manage findings to closure.
/n
- Support secure deployment of LLM-powered features: API gateway controls, rate limiting, prompt/response logging, output fil
📌 . Security Engineer (Pune)
🏢 Aistra
📍 Pune