Role & responsibilities

Senior Security Test Engineer for Banking Project

Lead offshore execution for internal and external network/infrastructure penetration testing. The core requirement is a network security and infrastructure VAPT specialist with delivery leadership capability; deep Azure cloud specialization is not a prerequisite.

- Own planning and execution oversight for Azure cloud security configuration reviews, including review of subscriptions, resource configuration, identity controls, network exposure, logging, monitoring and security posture.
- Assess Azure configurations against agreed benchmarks and client security requirements; document deviations, risk ratings, evidence and remediation recommendations.
- Perform or guide cloud-focused VAPT activities where authorized, including assessment of exposed services, cloud identity and access paths, storage permissions, network controls and configuration weaknesses.
- Lead customer workshops, kickoff and readout meetings; clarify scope, testing constraints, dependencies and risk acceptance.
- Coordinate with offshore testers and cloud/platform owners to validate findings and track remediation and retesting.
- Review technical reports for accuracy, evidence quality, risk prioritization and actionable remediation.




- Contribute to security architecture compliance reviews where they relate to Azure design and configuration.
- Escalate critical findings promptly and maintain clear status, risk and dependency reporting.
- Strong hands-on experience with Microsoft Azure security assessment and configuration review.
- Practical knowledge of Azure identity and access controls, RBAC, managed identities, network security groups, virtual networks, storage security, Key Vault, Defender for Cloud, Azure Monitor and diagnostic logging.
- Robust understanding of cloud misconfiguration risks, privilege exposure, insecure public access, secrets handling and cloud logging gaps.
- Good VAPT fundamentals and ability to validate cloud-related vulnerabilities, assess exploitability and explain business impact.
- Experience producing professional assessment reports with evidence, severity, remediation guidance and retest outcomes.
- Ability to lead client-facing discussions, manage scope and communicate technical risks clearly.

Preferred candidate profile

Good to have

- AWS Certified Security Specialty
- Experience with cloud security posture tools, infrastructure-as-code review or cloud threat modelling.
- Exposure to Key Vault, TLS/certificate governance, SIEM integration or remediation governance

📌 Hiring Cloud Security Engineer @ Chennai/ Quick Joiners
🏢 Expleo
📍 Chennai