AWS & Application Security Engineer

<p>&nbsp;</p> <p><strong>AWS &amp; Application Security Engineer</strong></p> <p><strong>Experience:</strong> 5+ Years&nbsp;<br><strong>Location:</strong> Pune,India</p> <p><strong>Job Role Pointers:</strong></p> <ul> <li>Conduct security assessments, VAPT, and penetration testing of web applications, mobile applications, AWS infrastructure, and networks.</li> <li>Perform security reviews of AWS accounts, VPCs, EC2 instances, EKS clusters, RDS databases, S3 buckets, Load Balancers, and serverless services.</li> <li>Implement and manage AWS security services such as GuardDuty, Security Hub, AWS Config, Inspector, CloudTrail, WAF, Shield, and IAM.</li> <li>Conduct regular cloud security posture assessments and identify misconfigurations against AWS security best practices and CIS benchmarks.</li> <li>Identify security vulnerabilities, misconfigurations, and compliance gaps, and drive remediation efforts.</li> <li>Hands-on experience with Ansible Automation for server provisioning, configuration management, security hardening, patch management, and compliance enforcement.</li> <li>Develop and maintain Ansible playbooks for automating security controls, vulnerability remediation, user access management, and AWS infrastructure deployments.</li> <li>Perform and support internal/external security audits and compliance assessments.</li> <li>Prepare security test cases, audit checklists, VAPT reports, and risk assessment reports.</li> <li>Coordinate with engineering and infrastructure teams to remediate findings within defined timelines.</li> <li>Implement OWASP security best practices and support secure SDLC initiatives.</li> <li>Perform Linux server hardening and infrastructure security reviews.</li> <li>Support firewall, network security, cloud security monitoring, and incident response activities.</li> </ul> <p><strong>Required Skills</strong></p> <ul> <li>Strong hands-on experience in AWS Security, Application Security, and VAPT.</li> <li>Hands-on experience with AWS Security Hub, GuardDuty, Inspector, CloudTrail, Config, WAF, Shield, Secrets Manager, and KMS.</li> <li>Experience securing containerized environments such as Docker and Kubernetes</li> <li>Expertise with tools such as Burp Suite Pro, Nessus, Qualys, Acunetix, Netsparker, Metasploit, WebInspect, and Nmap.</li> <li>Experience with OWASP Top 10, secure coding practices, and cloud security controls.</li> <li>Good understanding of Linux administration, server hardening, and network security.</li> <li>Experience participating in at least two security audits, with one conducted in the last 12 months.</li>