Key Responsibilities

1. AWS Cloud Security & Remediation (Primary Responsibility)

- Manage AWS Security Hub across multiple AWS accounts, regions, and environments.
- Monitor, investigate, prioritize, and remediate security findings.
- Manage and configure AWS security services, including Security Hub, GuardDuty, Inspector, AWS Config, and CloudTrail.
- Identify and resolve security misconfigurations related to IAM, EC2, S3, VPC, RDS, CloudFront, and other AWS services.
- Implement automated security remediation using Lambda, EventBridge, and Systems Manager.
- Establish remediation SLAs, track findings, and maintain security compliance.

2. Infrastructure Security & Hardening

- Perform AWS infrastructure security assessments and implement security best practices.
- Manage IAM permissions, network security, encryption, access controls, and logging.
- Ensure Linux server hardening, security patching, and vulnerability remediation.
- Secure infrastructure components such as Apache Tomcat, Nginx, MySQL, and Redis.
- Manage SSL/TLS certificates and secure configurations.

3. Application Security & Vulnerability Management (Secondary Responsibility)

- Identify and coordinate remediation of application and API security vulnerabilities.
- Implement SAST, DAST, SCA, and dependency scanning tools.
- Address OWASP Top 10 vulnerabilities and Java application security issues.
- Integrate security checks into GitHub and AWS CodeBuild CI/CD pipelines.
- Coordinate penetration testing and track vulnerability remediation.

4. Security Monitoring & Incident Response

- Monitor AWS security alerts and investigate suspicious activities.
- Handle security incidents, coordinate remediation, and perform root cause analysis.




- Maintain security dashboards, reports, and escalation processes.

5. DevSecOps & Security Automation

- Maintain secure CI/CD pipelines using GitHub Actions and AWS CodeBuild.
- Develop Python and Bash scripts for security automation.
- Implement infrastructure security controls using Terraform or equivalent IaC tools.
- Automate security checks, compliance validation, and remediation activities.

Required Technical Skills AWS Cloud Security (Must Have)

- Strong hands-on experience with AWS Security Hub, GuardDuty, Inspector, AWS Config, CloudTrail, and IAM.
- Experience in investigating and remediating AWS security findings across multiple accounts and regions.
- Valuable understanding of AWS Organizations, IAM, encryption, and network security.

Infrastructure & Application Security

- Strong Linux administration and server-hardening experience.
- Knowledge of EC2, VPC, S3, CloudFront, Route 53, ACM, and load balancers.
- Experience with vulnerability assessment, patch management, SSL/TLS, and firewall security.
- Understanding of OWASP Top 10, API security, Java application security, and vulnerability scanning.

Automation & DevSecOps

- Proficiency in Python and Bash scripting.
- Experience with GitHub, AWS CodeBuild, and CI/CD security integration.
- Knowledge of Terraform or other Infrastructure as Code tools.
- Experience with AWS security automation.

Good to Have
- AWS Certified Security Specialty certification.
- Knowledge of CIS AWS Foundations Benchmark, SOC 2, and ISO 27001.
- Experience with AWS Control Tower, WAF, SIEM, and security incident response.
- Experience securing enterprise SaaS applications and multi-account AWS environments.

📌 Senior DevSecOps Engineer (Bengaluru)
🏢 Virima Technologies
📍 Bengaluru