JD :
Implement and
maintain security controls across AWS cloud infrastructure,
applications and DevOps environments.
Embed security
practices into the SDLC and CI/CD pipelines following DevSecOps
principles.
Monitor and
manage security findings from AWS Security Hub, GuardDuty, Inspector,
CloudTrail and related security services.
Perform
vulnerability assessment, coordinate VAPT, analyze findings and drive
remediation with Development and DevOps teams.
Support
implementation and management of WAF, IAM, network security, security
groups, access controls and least-privilege policies.
Review cloud
infrastructure and application configurations for security risks and
misconfigurations.
Support SAST,
DAST, dependency scanning, container/image scanning and software
composition analysis within the development lifecycle.
Review
application and API security against OWASP Top 10 and API security
best practices.
Support security
hardening of Linux servers, containers and cloud workloads.
Monitor security
events and support investigation and response to security incidents.
Implement and
review secrets, credentials, certificates and privileged-access
management practices.
Track
vulnerabilities and ensure remediation within defined security SLAs.
Support security
assessments, customer security questionnaires, VAPT evidence and
compliance/audit requirements.
Work closely with
Development, QA,



DevOps and Product teams to incorporate security
requirements from design through production.
Maintain security
documentation, standards, procedures, risk registers and remediation
evidence.
Continuously
evaluate emerging threats and recommend improvements to the
organization's security posture.
Robust
understanding of AWS cloud security architecture and security best
practices.
Hands-on
experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail,
IAM and WAF.

Key technical
Skills Required :
Strong
understanding of IAM, RBAC, least privilege and privileged-access
controls.
Knowledge of VPC,
Security Groups, network segmentation, firewalls, IDS/IPS and network
security.
Hands-on
experience with vulnerability management and VAPT remediation.
Strong knowledge
of OWASP Top 10, web application security and API security.
Experience with
SAST, DAST, SCA/dependency scanning and security scanning tools.
Understanding of
CI/CD pipeline security and DevSecOps practices.
Knowledge of
Docker/container security and Linux security/hardening.
Understanding of
encryption, TLS, key management, secrets management and data
protection.
Familiarity with
SIEM, security logging, monitoring and incident response.
Basic scripting
capability using Python, Bash or similar scripting languages for
security automation.
Understanding of
SBOM and software supply-chain security is preferred

📌 Cyber Security (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru