About the Role

ASCENRA Technologies is looking for a Lead Security Engineer to become our first dedicated security hire and own security across our product and cloud platform.

You will work closely with the Head of Engineering and CEO, owning security architecture, cryptography, cloud security, application security, CI/CD security, threat modelling, detection and incident response.

This is a hands-on security engineering and architecture role, not a security operations or scanner-management position.

Key Responsibilities

- Own security architecture across cloud, application, cryptography and platform security.
- Design and manage encryption, key hierarchies, KMS/HSM, certificate lifecycle and mTLS.
- Secure AWS environments including IAM, KMS, SCPs, VPC segmentation, CloudTrail, GuardDuty and Security Hub.
- Lead application security for Node.js/TypeScript applications, including OAuth2/OIDC, JWT, authorization and multi-tenant isolation.
- Build and maintain threat models and security controls.
- Implement security gates across CI/CD including SAST, SCA, secrets and IaC scanning.
- Lead security incident response and act as incident commander when required.
- Own tenant isolation, secure SDKs, supply-chain security and secure software releases.
- Drive security assurance, VAPT, penetration testing and compliance controls.
- Work on AI/LLM security including Amazon Bedrock, RAG pipelines and vector stores.

Mandatory Skills & Experience

- 7 years of security engineering experience.
- 3 years as a Lead/Senior-most Security Engineer owning security design decisions for a production software product.
- Strong hands-on experience with AWS Security, IAM, KMS, SCPs, VPC, CloudTrail, GuardDuty and Security Hub.
- Strong applied cryptography experience including envelope encryption, key hierarchies, key rotation, HSM/KMS, certificates and mTLS.




- Solid Application Security experience with JavaScript/TypeScript, OAuth2/OIDC, JWT, authorization and multi-tenant security.
- Hands-on experience with OWASP Top 10 / API Security.
- Experience building CI/CD security gates using SAST, SCA, secret scanning and IaC scanning.
- Hands-on threat modelling experience.
- Experience leading security incident response.
- Strong Terraform skills and scripting experience with Python or Shell.
- Ability to distinguish genuine security risks from scanner noise and communicate security trade-offs clearly.

Good to Have

- Merkle trees, hash chaining, signed receipts or trusted timestamping.
- BYOK/HYOK, HSM or KMIP.
- Wiz/CNAPP/CSPM.
- Amazon Bedrock, RAG and LLM security.
- SBOM, SLSA and software supply-chain security.
- DPDP, GDPR, ISO 27001/27701 or SOC 2.
- OSCP, CISSP, CCSP or AWS Certified Security – Specialty.
- Customer-facing security assurance experience.

Education

B.E./B.Tech or M.Tech in Computer Science / IT.

Work Mode & Location

- Hybrid
- Grandthum, Tech Zone IV, Greater Noida West
- Monday, Tuesday & Thursday: Office
- Wednesday & Friday: Flexible/Remote
- Core collaboration hours: 11 AM–4 PM IST

Pay: ₹2,700,000.00 - ₹2,800,000.00 per year

Application Question(s)

- How many years of professional experience do you have in Security Engineering?
- How many years have you worked as a Lead/Senior-most Security Engineer owning security architecture/design decisions for a production software product?
- Do you have hands-on experience with AWS security, including IAM, KMS, SCPs, VPC segmentation, CloudTrail, GuardDuty and Security Hub?
- Do you have hands-on experience with application security for JavaScript/TypeScript applications, including OAuth2/OIDC, JWT, authorization and multi-tenant isolation?
- Are you comfortable working from Greater Noida in a hybrid model?

Work Location: Hybrid remote in Greater Noida, Uttar Pradesh

📌 Lead Security Engineer (Cloud & Application Security) (Greater Noida)
🏢 Ascenra Technologies
📍 Greater Noida