Senior Security Engineer – Security Engineering & Third-Party Security Full-time contract | Remote, India | ₹18–24 lakh per year Join Symosis Security, a growing cybersecurity firm serving US enterprise and public-sector clients.
• Schedule: Monday–Friday, 9 AM–6 PM US Eastern Time, following US daylight saving changes.
• Compensation: Annual contract fee of ₹18–24 lakh, paid monthly.
• Time off: 10 working days of paid time off annually.
• Arrangement: Independent contractor engaged directly by Symosis Security LLC, US. No company-sponsored health insurance or employee advantages. About Symosis Security Symosis Security is a Silicon Valley cybersecurity consulting and engineering firm with delivery teams in the US and India. We help enterprise and public-sector clients assess risk, test defenses, and implement security improvements across applications, cloud platforms, identity, and AI systems. We’re looking for a hands-on senior security engineer who can assess technical risk, review architectures, evaluate third-party security, implement controls, and build automation. You’ll own work from identifying weaknesses through implementing and validating improvements. What you’ll do
• Technical risk assessments: Evaluate threats, vulnerabilities, control effectiveness, and business impact. Document evidence-based findings and prioritized remediation.
• Security architecture reviews: Review application, cloud, SaaS, and identity architectures, including data flows, trust boundaries, authentication, authorization, integrations, and sensitive data handling.
• Third-party security assessments: Assess vendors and service providers through technical walkthroughs, architecture reviews,



SOC 2 reports, penetration testing results, questionnaires, and supporting evidence. Validate gaps and track remediation.
• Security engineering: Configure, harden, integrate, and troubleshoot security controls. Implement approved fixes and test their effectiveness.
• Coding and automation: Build scripts, API integrations, and workflows for evidence collection, configuration validation, security monitoring, remediation, and reporting.
• Delivery ownership: Produce clear technical documentation, communicate findings directly to client teams, and drive assigned work through verified closure. Essential qualifications
• 6+ years of relevant hands-on cybersecurity experience.
• Experience independently delivering technical risk assessments and security architecture reviews.
• Experience conducting third-party security assessments and validating vendor security claims.
• Strong technical depth in at least one area: cloud security, IAM, SaaS security, endpoint security, or application security.
• Demonstrated ability to implement and troubleshoot security controls—not solely recommend improvements.
• Practical coding experience with Python, PowerShell, or a comparable language, including REST APIs, debugging, and security automation.
• Working knowledge of NIST, ISO 27001, SOC 2,



or CIS Controls and translating requirements into technical controls.
• Strong written English and ability to lead technical discussions with US client teams.
• Located in India and available to work the stated US Eastern Time schedule. Preferred qualifications
• Microsoft Entra ID, Azure, Microsoft 365, AWS, or SaaS security engineering experience.
• Threat modeling, application security, DevSecOps, or infrastructure as code.
• Experience using Claude, Codex, GitHub Copilot, or similar tools to build automation, including reviewing, debugging, and validating generated code.
• AI security assessments or security reviews of AI-enabled applications.
• Relevant certifications such as CISSP, CCSP, CISA, CRISC, or cloud security certifications. Engagement and compensation
• Annual contract fee of ₹18–26 lakh, paid monthly.
• 10 working days of paid time off annually.
• Independent contractor engagement directly with Symosis Security LLC, US.
• No company-sponsored health insurance or employee benefits.

How to apply
Apply through LinkedIn and email [email protected] with:
• Résumé, certifications, notice period, and expected annual contract fee.
• A brief example of a technical risk assessment, architecture review, or third-party assessment you personally delivered.
• An example of a security control you implemented and how you verified the outcome.
• An automation you built: the problem, technologies used, and results.
• A sanitized or self-created technical finding, assessment, or code sample. Do not share confidential client information.

📌 Senior Security Engineer – Security Engineering (India)
🏢 Symosis Security
📍 India