Security Engineer III - Vulnerability Management

Job description :

Key Skills :

- Security Engineering

- Cyber Security

- Information Security

- Data Security

- Cloud Security

- Network Security

- Generative AI

- AI/ML

- Vulnerability Management

- Incident Response

Roles & Responsibilities :

- Design, build, and integrate advanced security solutions including firewalls, encryption mechanisms, intrusion detection/prevention systems, and endpoint security tools.

- Collaborate with development teams to embed security controls into the Software Development Lifecycle (SDLC).

- Automate security workflows, vulnerability management, and incident response processes using AI/ML-driven tools.

- Lead security initiatives to address evolving cyber threats and enhance overall security posture.

- Design, implement, and manage secure cloud architectures across AWS, Azure, and Google Cloud platforms.

- Leverage Generative AI and ML models to improve threat detection, anomaly detection, and predictive risk analysis.

- Implement automated security configurations and DevSecOps practices within CI/CD pipelines.

- Develop and manage data protection strategies including encryption, tokenization, masking, and secure key management.

- Establish and enforce data classification, access control, and retention policies.

- Monitor and enhance cloud and network security controls to ensure compliance with security standards.

- Provide security risk assessments, dashboards, and reports to leadership and stakeholders.

- Develop and update security policies aligned with AI/ML security best practices.

- Conduct training sessions and workshops on AI-driven security operations for internal teams.

Experience Required :

- 6 - 10 years of experience in Security Engineering or Cybersecurity roles.

- Strong hands-on experience in cloud security (AWS, Azure, or GCP).

- Experience implementing AI/ML-driven security tools and automation frameworks.

- Proven expertise in vulnerability management, threat modeling, and incident response.

- Experience securing containerized and microservices-based environments.

- Strong understanding of network security concepts, Zero Trust architecture, and perimeter defense.

- Exposure to compliance frameworks such as ISO 27001, SOC 2, or NIST.

- Experience integrating security into DevOps/CI-CD pipelines (DevSecOps).