Senior Security Engineer

Senior Security Engineer
R&D – Onit – Pune, Maharashtra, India – Full Time

Onit, Inc. is looking for a Senior Secops Engineer to join our team in Pune to help secure, manage and keep a diverse infrastructure across numerous geographical locations. To be successful in this role, great people skills and a passion for technology are necessary. The individual we look for is bright, creative and a problem solver. You must be able to multi-task in a fast-paced environment and be a self-starter with the ability to work independently.

Responsibilities:

• Manage ongoing vulnerability testing, penetration testing and client security audits.
• Implement and manage cloud-native security tools and third-party solutions for threat detection and incident response.
• Monitor cloud environments for security incidents and respond to alerts.
• Perform regular risk assessments and vulnerability scans of cloud infrastructure.
• Work with DevOps and Infra teams to remediate identified vulnerabilities.
• Automate security processes and controls using tools like Terraform, Ansible, or CloudFormation.
• Analyse EDR alerts and logs to identify potential security incidents and take appropriate action.
• Develop and tune detection rules, alerts, and reports within SIEM tools to enhance threat visibility and response.

• Bachelor’s degree in computer science or equivalent experience is required.
• Minimum of 4 years of experience in information security, with at least 2 years focused on cloud security.
• Certifications such as CCSP, AWS Security, OSCP or equivalent are preferred.
• Good knowledge of various AWS Native Security tools, Security frameworks and CSPM tools.
• Familiarity with cloud container services like AWS EKS, ECS and Fargate.
• Experience in CI/CD Tools Including Git, Jenkins, Ansible, or similar.
• Experience in security tools such as Vulnerability scanners, IDS/IPS, firewalls, and endpoint security monitoring.
• Familiarity with Zero-Trust security models and principles.
• Experience with SIEM/event correlation systems like Splunk, ELK, etc. required.
• Familiarity with security frameworks such as NIST and ISO 27001.
• Excellent written and verbal communication skills required.

• Automation experience with one for more of the following: AWS CLI, Bash, Python, Ansible to verify security configurations and conditions.
• Experience with Cloudflare and/or CloudFront WAF configurations.
• Experience with AWS Guard Duty, Crowdstrike, and Elastic SIEM.