Role : Security Specialist

Drone Analytics Multi-Tenant SaaS Platform: MVP to GA

Experience : 5+ years in application and cloud security

Stack : AWS/Azure IAM, KMS/Key Vault, Vault, WAF, Semgrep/SonarQube, ZAP/Burp, Trivy, SIEM, mTLS, OAuth2/OIDC

Role Summary

Makes the platform secure by design and ready for enterprise security reviews: owns security architecture, vulnerability management, pen-test remediation and the compliance evidence needed for GA.

Key Responsibilities

- Threat modelling: Run STRIDE models for tenancy, identity, APIs, media upload/streaming, plugins and GPU workers; track mitigations to closure.
- Tenant isolation: Review isolation at API, database, cache, queue and object-storage layers; define cross-tenant test cases with QA.
- Encryption and secrets: Set TLS policy, encryption at rest, per-tenant envelope keys with rotation; enforce no secrets in code or images.
- Zero-trust: Define service identity, mTLS, network segmentation, least-privilege IAM and Kubernetes workload identity.
- Secure SDLC: Embed SAST, DAST, SCA, container and IaC scanning in CI/CD with severity SLAs; manage SBOMs; review AI-generated code.
- API and identity review: Check OWASP Top 10 and API Top 10 (object-level authorisation, SSRF,



unsafe media upload), SSO/SCIM, tokens, RBAC and audit logs.
- Testing and response: Coordinate external pen tests and retests; define SIEM logging, alerting and incident response runbooks.
- Compliance: Map controls to SOC 2 and ISO 27001, support GDPR, maintain audit evidence, answer customer questionnaires.

Required Skills

- 5+ years in application and cloud security; AWS or Azure IAM design.
- OWASP Top 10, secure SDLC, threat modelling.
- SAST/DAST/SCA tooling in CI/CD.
- Encryption, KMS and secrets management.
- SOC 2 or ISO 27001 controls and evidence collection.

Preferred

- Kubernetes and container security; SIEM and detection engineering; GDPR privacy engineering; CISSP, CCSP, CISM, OSCP or cloud security certification.

Key Deliverables

- Threat models and security architecture, controls matrix (SOC 2/ISO 27001), CI/CD security gates and vulnerability SLA policy, pen-test report with closed findings, incident response plan.

Education

Bachelor’s in Computer Science, Information Security or equivalent experience.

Pay: ₹800,000.00 - ₹1,200,000.00 per year

Work Location: In person

📌 Security Specialist (Hyderabad)
🏢 Spatial Alphabet
📍 Hyderabad