Job description
About the role
Full-time, on-site role in Information Security and IT Infrastructure, owning security across AWS infrastructure, developer environments, CI/CD pipelines and office IT systems.
Key responsibilities
- Harden and audit AWS IAM, VPC, EC2, S3, RDS, security groups, KMS and access controls; manage CloudTrail, GuardDuty, Security Hub, Config, WAF, logging and alerts.
- Secure endpoints through EDR, antivirus, patching, BitLocker/FileVault encryption, USB restrictions, privileged access management, MFA, VPN and onboarding/offboarding access controls.
- Review source code, CI/CD pipelines and containers; manage API credentials, secrets vaults and key rotation; remediate OWASP Top 10 vulnerabilities.
- Conduct vulnerability assessments, coordinate penetration testing and verify remediation; develop and drill incident response runbooks, investigate root causes, and validate backups, disaster recovery and resilience.
Requirements
- Minimum 5 years of hands-on cybersecurity operations, cloud infrastructure security and endpoint protection experience.
- Deep practical expertise securing multi-tier AWS architectures.
- Strong knowledge of networking, subnetting, firewalls, TLS/SSL and Linux/Windows security.
- Python, Bash or PowerShell scripting for security automation.
- Independent investigation, containment and preventive-action skills; high ethical standards, accountability and attention to detail.
- Ability to explain security risks and remediation to engineering and management teams.
- Immediate availability and willingness to work on-site.
- Preferred: fintech, payment gateway, banking or regulated financial-data security experience.
- Preferred certifications: AWS Certified Security – Specialty, CISSP, CEH, CompTIA Security+ or relevant EDR/cloud security accreditations.
Interested in this role? Apply through this page or email your CV to apply@expertalent.in. Know someone who would be a good fit? Share this job with them.