Position Overview :

We are seeking an experienced Senior Cloud & Application Security Engineer to join our Cybersecurity team. In this role, you will play a critical part in protecting our cloud infrastructure, network architectures, and software applications. You will be responsible for end-to-end application security testing, threat detection, network-level troubleshooting, and cloud security governance across AWS and multi-cloud environments.

Required Qualifications & Technical Skills :

- Application Security: Hands-on experience with Veracode (SAST/DAST/SCA), Qualys TotalAppSec, Burp Suite, ZAP, Nessus, OpenVAS, and Nmap.

- AWS Security Infrastructure: Deep understanding of AWS networking/security services (VPC, Site-to-Site VPN, GuardDuty, Macie, Config, SecurityHub, Inspector, IAM, S3, KMS, Secrets Manager, Certificate Manager).

- Network & Packet Troubleshooting: Expertise in network components (NAT, Bastion, Security Groups, ACLs, CloudTrail) and deep packet analysis via Wireshark / tcpdump.

- WAF & Edge Security: Expertise with AWS WAF, Cloudflare WAF, Bot Management, and Rate Limiting.

- SecOps & Endpoint Security: Operational knowledge of SIEM, EDR, and Malware Protection configuration and threat monitoring.

- Automation: Proficiency in Python for security scripting, API integrations, and reporting.

Preferred Certifications :

- AWS Certified Security Specialty (Highly Preferred)

- CompTIA Security+

- Certified Ethical Hacker (CEH)

- Equivalent certifications such as CISSP, OSCP, or GIAC (GSEC/GCIH) are a plus.

Key Responsibilities :

1. Application & Software Security (AppSec) :

- Implement, manage, and optimize Veracode platform capabilities, including SAST, DAST, and Software Composition Analysis (SCA).

- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.

- Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ZAP, Nessus, OpenVAS, and Nmap.

- Manage Edge and Layer 7 security using AWS WAF and Cloudflare WAF, defining and maintaining rate-limiting rules, bot management policies, and custom firewall configurations.

2. Cloud & Network Security Architecture :

- Design, configure, and manage secure AWS network architectures involving VPCs, Security Groups, Network ACLs, NAT Gateways, Bastion Hosts, and Site-to-Site VPNs.

- Administer AWS security governance, monitoring, and compliance tooling, including Security Hub, GuardDuty, Macie, Config, Inspector, and CloudTrail.

- Implement and audit identity and data protection standards using AWS IAM, S3, KMS, Secrets Manager, and AWS Certificate Manager (ACM).

- Configure network-level logging, analyze network traffic, and troubleshoot complex routing or security issues.

- Perform dynamic packet analysis using Wireshark, tcpdump, and packet inspection tools to diagnose complex network/security anomalies.

3. Security Operations & Automation :

- Maintain operational visibility into Malware Protection, SIEM, and Endpoint Detection and Response (EDR) platforms (configuration, monitoring, and incident investigation).

- Develop continuous automation scripts in Python to streamline repetitive security operations, automate report generation, and integrate security workflows.