Experience: 5+ years in application and cloud security

Stack: AWS/Azure IAM, KMS/Key Vault, Vault, WAF, Semgrep/SonarQube, ZAP/Burp, Trivy, SIEM, mTLS, OAuth2/OIDC

Role Summary:

Makes the platform secure by design and ready for enterprise security reviews: owns security architecture, vulnerability management, pen-test remediation and the compliance evidence needed for GA.

Key Responsibilities:

- Threat modelling: Run STRIDE models for tenancy, identity, APIs, media upload/streaming, plugins and GPU workers; track mitigations to closure.

- Tenant isolation: Review isolation at API, database, cache, queue and object-storage layers; define cross-tenant test cases with QA.

- Encryption and secrets: Set TLS policy, encryption at rest, per-tenant envelope keys with rotation; enforce no secrets in code or images.

- Zero-trust: Define service identity, mTLS, network segmentation, least-privilege IAM and Kubernetes workload identity.

- Secure SDLC: Embed SAST, DAST, SCA, container and IaC scanning in CI/CD with severity SLAs; manage SBOMs; review AI-generated code.

- API and identity review: Check OWASP Top 10 and API Top 10 (object-level authorisation, SSRF, unsafe media upload), SSO/SCIM, tokens, RBAC and audit logs.





- Testing and response: Coordinate external pen tests and retests; define SIEM logging, alerting and incident response runbooks.

- Compliance: Map controls to SOC 2 and ISO 27001, support GDPR, maintain audit evidence, answer customer questionnaires.

Required Skills:

- 5+ years in application and cloud security; AWS or Azure IAM design.

- OWASP Top 10, secure SDLC, threat modelling.

- SAST/DAST/SCA tooling in CI/CD.

- Encryption, KMS and secrets management.

- SOC 2 or ISO 27001 controls and evidence collection.

Preferred:

- Kubernetes and container security; SIEM and detection engineering; GDPR privacy engineering; CISSP, CCSP, CISM, OSCP or cloud security certification.

Key Deliverables:

- Threat models and security architecture, controls matrix (SOC 2/ISO 27001), CI/CD security gates and vulnerability SLA policy, pen-test report with closed findings, incident response plan.

Education:

Bachelor’s in Computer Science, Information Security or equivalent experience.

Pay: ₹1,000,000.00 - ₹1,400,000.00 per year

Work Location: In person

📌 Security Specialist (Kondapur)
🏢 Spatial Alphabet
📍 Kondapur