Lead Security Engineer (Cloud & Application Security)

Job Title: Lead Security Engineer – Cloud & Application Security
Location: Greater Noida, Uttar Pradesh
Work Mode: Hybrid
Employment Type: Full-time, Permanent
Experience: 7+ years
About the Role
Looking for a Lead Security Engineer to become our first dedicated security hire and own security across our product and cloud platform.
You will work closely with the Head of Engineering and CEO, owning security architecture, cryptography, cloud security, application security, CI/CD security, threat modelling, detection and incident response.
This is a hands-on security engineering and architecture role, not a security operations or scanner-management position.
Key Responsibilities
Own security architecture across cloud, application, cryptography and platform security.
Design and manage encryption, key hierarchies, KMS/HSM, certificate lifecycle and mTLS.
Secure AWS environments including IAM, KMS, SCPs, VPC segmentation, CloudTrail, GuardDuty and Security Hub.
Lead application security for Node.js/TypeScript applications, including OAuth2/OIDC, JWT, authorization and multi-tenant isolation.
Build and maintain threat models and security controls.
Implement security gates across CI/CD including SAST, SCA, secrets and IaC scanning.
Lead security incident response and act as incident commander when required.
Own tenant isolation, secure SDKs, supply-chain security and secure software releases.
Drive security assurance, VAPT, penetration testing and compliance controls.
Work on AI/LLM security including Amazon Bedrock, RAG pipelines and vector stores.
Mandatory Skills & Experience
7+ years of security engineering experience.
3+ years as a Lead/Senior-most Security Engineer owning security design decisions for a production software product.
Strong hands-on experience with AWS Security, IAM, KMS, SCPs, VPC, CloudTrail, GuardDuty and Security Hub.
Strong applied cryptography experience including envelope encryption, key hierarchies, key rotation, HSM/KMS, certificates and mTLS.
Strong Application Security experience with JavaScript/TypeScript, OAuth2/OIDC, JWT, authorization and multi-tenant security.
Hands-on experience with OWASP Top 10 / API Security.
Experience building CI/CD security gates using SAST, SCA, secret scanning and IaC scanning.
Hands-on threat modelling experience.
Experience leading security incident response.
Strong Terraform skills and scripting experience with Python or Shell.
Ability to distinguish genuine security risks from scanner noise and communicate security trade-offs clearly.
Good to Have
Merkle trees, hash chaining, signed receipts or trusted timestamping.
BYOK/HYOK, HSM or KMIP.
Wiz/CNAPP/CSPM.
Amazon Bedrock, RAG and LLM security.
SBOM, SLSA and software supply-chain security.
DPDP, GDPR, ISO 27001/27701 or SOC 2.
OSCP, CISSP, CCSP or AWS Certified Security – Specialty.
Customer-facing security assurance experience.
Education
B.E./B.Tech or M.Tech in Computer Science / IT.
Work Mode & Location
Hybrid
Grandthum, Tech Zone IV, Greater Noida West
Monday, Tuesday & Thursday: Office
Wednesday & Friday: Flexible/Remote
Core collaboration hours: 11 AM–4 PM IST

Work arrangement
Hybrid