JobCubby JobCubby
Sign up
R

Security Apps & Operations Engineer

RediMinds, Inc Gurugram, Uttarakhand, India

Information Services · 51-200 employees

Yesterday
Remote Mid (2-5 yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The Security Apps & Operations Engineer will secure applications and cloud infrastructure while managing SIEM/SOC tooling and DevSecOps practices. They will collaborate cross-functionally to identify risks, respond to security threats, and maintain compliance standards.

What they look for

Application Security DevSecOps Cloud Security SIEM SOC Operations AWS Azure GCP Vulnerability Management Python Bash PowerShell IAM Threat Modeling Incident Response Networking

Requirements

Candidates must have 2-3 years of hands-on experience in application security or security operations and a bachelor's degree in a relevant field. Proficiency in cloud platforms, SIEM tools, and scripting languages like Python or PowerShell is required.

Benefits

Competitive salary Performance-based bonus Comprehensive health insurance Dental insurance Vision insurance Professional certification support Continuous learning support Flexible work arrangements

Full description

Role Summary

We are looking for a motivated Security Apps & Operations Engineer to join our security team. In this role you will be responsible for securing our applications and cloud infrastructure, operating and tuning our SIEM/SOC tooling, and embedding security practices into the software development lifecycle (DevSecOps). You will work cross-functionally with engineering, IT, and compliance teams to identify risks, respond to threats, and continuously improve our security posture. This is a rotational shift role with overlap with US hours.

Key Responsibilities

Application Security & DevSecOps

  • Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and enforce security gates.
  • Conduct vulnerability assessments and coordinate remediation with development teams.
  • Perform threat modeling and security code reviews for new features and major changes.
  • Maintain and improve application security standards, policies, and secure coding guidelines.
  • Track and report on vulnerability metrics, SLA adherence, and risk exposure.

Cloud Security (AWS / Azure / GCP)

  • Monitor and enforce cloud security configurations using tools such as AWS Security Hub, Azure Defender, or GCP Security Command Center.
  • Manage Identity and Access Management (IAM) policies, least-privilege principles, and privilege access controls across cloud environments.
  • Perform cloud infrastructure security reviews and ensure compliance with CIS Benchmarks and organizational standards.
  • Respond to cloud security incidents and misconfigurations, driving root-cause analysis and remediation.

SIEM & SOC Operations

  • Operate, tune, and maintain SIEM platforms (e.g., Splunk, Microsoft Sentinel, or equivalent).
  • Develop and maintain detection rules, correlation queries, and alerting logic to reduce noise and improve fidelity.
  • Triage and investigate security alerts; escalate confirmed incidents following the IR playbook.
  • Create dashboards and reports to surface key security metrics for stakeholders.
  • Participate in on-call rotation for security incident response.

General Operations

  • Support audit activities (SOC 2, ISO 27001, or similar) by providing evidence and remediating findings.
  • Document runbooks, playbooks, and standard operating procedures.
  • Stay current with the threat landscape, emerging CVEs, and security tooling developments.
  • Contribute to day-to-day security operation (monitoring)

Requirements

Experience & Education

  • 2 – 3 years of hands-on experience in an application security, security operations, or similar role.
  • Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Technical Skills

  • Proficiency with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.
  • Experience with SIEM platforms (Splunk, Sentinel, Elastic Security, or similar) — including writing queries/rules (SPL, KQL, etc.).
  • Familiarity with DevSecOps tooling: SAST (e.g., Semgrep, SonarQube), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Dependabot).
  • Understanding of OWASP Top 10, CVE scoring, and vulnerability management workflows.
  • Scripting ability in Python, Bash, or PowerShell for automation and tooling.
  • Working knowledge of networking concepts (TCP/IP, DNS, TLS, firewalls, proxies).

Soft Skills 

  • Clear written and verbal communication — able to explain technical risk to non-technical stakeholders.
  • Detail-oriented with strong analytical and problem-solving skills.
  • Collaborative team player who thrives in a fast-paced, cross-functional environment.

Preferred Qualifications

  • Industry certifications such as CompTIA Security+, AWS Security Specialty, GCIA, GCSA, CEH, or equivalent.
  • Experience with container security (Docker, Kubernetes) and infrastructure-as-code security scanning (Terraform, CloudFormation).
  • Familiarity with compliance frameworks: SOC 2, ISO 27001, NIST CSF, or PCI-DSS.
  • Prior exposure to incident response or digital forensics workflows.
  • Experience with ticketing and ITSM platforms (Jira, ServiceNow).

What We Offer

  • Competitive salary and performance-based bonus.
  • Comprehensive health, dental, and vision benefits.
  • Support for professional certifications and continuous learning.
  • Flexible work arrangements.
  • Collaborative, security-first culture where your work has real impact.