Lead Security Engineer

Job Title: Lead Security Engineer

Location: Hyderabad (Onsite)

Employment Type: Full-Time

Experience: 510 Years

Role Overview

We are looking for a Lead Security Engineer to drive end-to-end security across applications, cloud infrastructure, and DevOps pipelines. The ideal candidate should be a hands-on security expert with strong experience in cloud security, application security, and compliance frameworks, along with the ability to lead and mentor teams.

Key Responsibilities

Security Architecture & Strategy

• Design and implement security architecture for cloud and application environments
• Define security best practices, policies, and standards
• Identify risks and ensure mitigation strategies are in place

Application & DevSecOps Security

• Implement secure coding practices and integrate security into CI/CD pipelines
• Perform VAPT, SAST, DAST, and API security testing
• Collaborate with engineering teams to fix vulnerabilities

Cloud & Infrastructure Security

• Secure cloud environments (AWS/Azure) including IAM, networking, and storage
• Implement container and Kubernetes security best practices
• Ensure infrastructure security and compliance

Security Operations

• Monitor systems using SIEM, EDR, WAF, and logging tools
• Lead incident response, threat detection, and root cause analysis
• Improve monitoring, alerting, and overall security posture

Compliance & Governance

• Ensure compliance with ISO 27001, SOC 2, PCI-DSS, and regulatory standards
• Conduct security audits and risk assessments
• Maintain security documentation and policies

Leadership & Collaboration

• Lead and mentor a team of security engineers
• Work with cross-functional teams (DevOps, Engineering, Product)
• Drive security awareness and best practices across the organization

Required Skills

• Strong experience in Cyber Security / Information Security
• Hands-on expertise in Cloud Security (AWS/Azure)
• Experience in Application Security (VAPT, SAST, DAST, API Security)
• Knowledge of DevSecOps practices and CI/CD security
• Familiarity with SIEM, WAF, IDS/IPS, EDR tools
• Strong understanding of network security fundamentals

Preferred Qualifications

• Experience in product-based or SaaS environments
• Certifications like CEH, CISSP, OSCP, AWS Security (good to have)
• Exposure to Kubernetes / container security

What Were Looking For

• Strong ownership mindset
• Hands-on problem solver
• Ability to lead from the front
• Excellent communication and stakeholder management