Position Overview

We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud environments.

Required Qualifications & Technical Skills

- Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.
- AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).
- Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.
- WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.
- SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.
- Automation: Proficiency in Python for security scripting, API integrations, and reporting.

Preferred Certifications

- AWS Certified Security Specialty (Highly Preferred)
- CompTIA Security+
- Certified Ethical Hacker (CEH)
- Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a plus.

Candidate responsibilities

Key Responsibilities

Application & Software Security (AppSec)

- Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST,



and Software Composition Analysis (SCA).
- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.
- Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.
- Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.

Cloud & Network Security Architecture

- Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.
- Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.
- Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).
- Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.
- Perform energetic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.

Security Operations & Automation

- Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).
- Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows.

📌 Senior Cloud & Application Security Engineer (Chennai)
🏢 Grid Dynamics
📍 Chennai