JD :
Implement and maintain security controls across AWS cloud infrastructure, applications and DevOps environments.
Embed security practices into the SDLC and CI/CD pipelines following DevSecOps principles.
Monitor and manage security findings from AWS Security Hub, GuardDuty, Inspector,CloudTrail and related security services.
Perform vulnerability assessment, coordinate VAPT, analyze findings and drive remediation with Development and DevOps teams. Support implementation and management of WAF, IAM, network security, securitygroups, access controls and least-privilege policies.
Review cloud infrastructure and application configurations for security risks and misconfigurations.
Support SAST, DAST, dependency scanning, container/image scanning and software composition analysis within the development lifecycle. Review application and API security against OWASP Top 10 and API security best practices. Support security hardening of Linux servers, containers and cloud workloads.
Monitor security events and support investigation and response to security incidents.
Implement and review secrets, credentials, certificates and privileged-access management practices.
Track vulnerabilities and ensure remediation within defined security SLAs.
Support security assessments, customer security questionnaires, VAPT evidence and compliance/audit requirements.
Work closely with Development, QA,



DevOps and Product teams to incorporate security requirements from design through production.
Maintain security documentation, standards, procedures, risk registers and remediation evidence.
Continuously evaluate emerging threats and recommend improvements to the organization's security posture.
Strong understanding of AWS cloud security architecture and security best practices.
Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, IAM and WAF.

Key technical
Skills Required :
Strong understanding of IAM, RBAC, least privilege and privileged-access controls.
Knowledge of VPC, Security Groups, network segmentation, firewalls, IDS/IPS and network security.
Hands-on experience with vulnerability management and VAPT remediation.
Robust knowledge of OWASP Top 10, web application security and API security.
Experience with SAST, DAST, SCA/dependency scanning and security scanning tools.
Understanding of CI/CD pipeline security and DevSecOps practices.
Knowledge of Docker/container security and Linux security/hardening.
Understanding of encryption, TLS, key management, secrets management and data protection.
Familiarity with SIEM, security logging, monitoring and incident response.
Basic scripting capability using Python, Bash or similar scripting languages for security automation.
Understanding of SBOM and software supply-chain security is preferred

📌 Cyber Security (Pivot Path) (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru