Senior Security Engineer – Security Engineering & Third-Party SecurityFull-time contract | Remote, India | ₹18–26 lakh per year
Independent contractor engagement; no employee benefits.
Working hours: Monday–Friday, 9:00 AM–6:00 PM US Eastern Time,
About Symosis Security
Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and implement security improvements across applications, cloud platforms, identity, and AI systems.
We’re looking for a hands-on senior security engineer who can investigate security gaps, implement fixes, validate controls, and own technical work through completion. You’ll also conduct third-party security assessments grounded in technical evidence.
What you’ll do
- Configure, harden, and troubleshoot security controls across cloud, SaaS, identity, endpoint, and application environments.
- Review configurations, permissions, logs, integrations, and data flows to identify and validate security weaknesses.
- Implement remediation, test changes, and collect evidence demonstrating that controls work.
- Conduct third-party security assessments, examining vendor architecture, access controls, data protection, application security, and operational practices.
- Review SOC 2 reports, penetration testing results, and vendor responses; investigate gaps and validate remediation evidence.
- Translate security requirements into configuration changes, implementation tasks, and repeatable validation procedures.
- Maintain clear technical documentation, findings, implementation records, and remediation tracking.
- Work directly with client engineering teams to deliver improvements and resolve technical blockers.
Essential qualifications
- 6+ years of relevant experience in hands-on security engineering.
- Demonstrated ability to implement and troubleshoot security controls, independently own technical tasks, and verify results.
- Strong technical depth in at least one area: cloud security, IAM, SaaS security, endpoint security, or application security.
- Experience conducting technical security assessments and third-party security reviews.
- Ability to validate security claims through configurations, logs, testing, and supporting evidence.
- Working knowledge of frameworks such as NIST, ISO 27001, SOC 2, or CIS Controls and how to translate requirements into technical controls.
- Robust written English and clear communication with technical and business stakeholders.
- Ability to produce client-ready documentation and drive assigned work through closure.
Experience in policy writing, questionnaires, or audit coordination alone is insufficient for this role.
Preferred qualifications
- Coding and automation experience using Python, PowerShell, Bash, REST APIs, or infrastructure as code.
- Experience automating evidence collection, configuration checks, remediation, or security platform integrations.
- Experience using Claude, Codex, GitHub Copilot, or similar tools, including reviewing, debugging, and validating generated code.
- Microsoft Entra ID, Azure, Microsoft 365, AWS, or SaaS security engineering experience.
- Application security, threat modeling, AI security, or DevSecOps experience.
- Relevant security or cloud certifications.
How to apply Apply through LinkedIn and email
[email protected] with:
- Résumé, certifications, notice period, and expected annual contract fee.
- Two examples of security improvements you personally implemented: the problem, your changes, and how you validated the outcome.
- A brief example of a third-party security assessment you completed.
- A sanitized technical work sample and any coding or automation examples, if available.
📌 Senior Security Engineer – Security Engineering & Third-Party Security (India)
🏢 Symosis Security
📍 India