Role: Security Engineer — Application & File Security
Experience: 5+yrs
Notice period: Immediate - 15days
Work Mode: Remote

Background & Authorization
This is a remote role based in India. The engagement operates on a mid-day to late-night shift to align with the US client team. Working hours are approximately 1:00 PM – 10:30 PM IST during US Eastern Daylight Time (EDT) and 1:00 PM – 11:00 PM IST during US Eastern Standard Time (EST).

Role Purpose
Execute application-layer security remediation for TLS cipher hardening and file upload security controls under the direction of the Security Engineering Lead. Own the accurate, tested delivery of these controls — every TLS change validated against the pre-remediation compatibility survey, every file upload control tested against a comprehensive edge-case matrix. Also contributes to the security unit test pilot components.

Key Responsibilities
• Implement load balancer cipher policy changes per Security Engineering Lead design — execute in non-production, validate against compatibility survey,



then promote to production through the CI/CD pipeline
• Build and deploy a containerised file upload scanner (ClamAV) — Docker multi-stage image, ECS Fargate or Lambda integration, REST API endpoint, fail-closed error handling, and horizontal auto-scaling
• Implement path traversal protection for archive file uploads (ZipSlip pattern) — archive extraction validation, path normalisation enforcement, rejection of escaping entries
• Implement insecure PDF handling controls — magic byte validation, embedded JavaScript detection, external URL reference blocking, file size limits
• Execute TLS rollback testing — validate rollback from TLS 1.3-only to TLS 1.2 AEAD-only within a maintenance window
• Produce post-remediation cipher scan evidence — compliance report confirming no deprecated cipher suites remain on any endpoint
• Build and execute a comprehensive file upload security test matrix — EICAR test file, oversized ZIP, recursive arc

📌 Security Engineer — Application (India)
🏢 SysTechCorp
📍 India