Senior Security Test Engineer

We are seeking a Senior Security Test Engineer – Infrastructure with strong expertise in on-premise and cloud security. The role focuses on designing, implementing, and monitoring robust security architectures while ensuring compliance with industry standards such as PCI DSS, SOC2, and GDPR . The ideal candidate will lead threat detection, vulnerability management, and incident response initiatives across complex infrastructure environments. Core Responsibilities 1. Design and Implement Security Systems – On Premise and Cloud - Develop and implement security architectures for new and existing systems. - Integrate security controls into both software and hardware environments. - Configure and manage firewalls, VPNs, intrusion detection systems (IDS), and intrusion prevention systems (IPS). - Design and implement cloud-native security controls including firewalls, DDoS protection, workload protection, and network segmentation. 2. Monitor and Respond to Threats - Utilize security tools to continuously monitor network traffic and detect malicious activity. - Investigate security breaches, incidents, and potential compromises. - Lead and coordinate responses to security incidents, including containment, mitigation, and forensic analysis. - Monitor cloud-native SIEM/SOAR platforms and security dashboards for proactive threat detection and response. 3. Vulnerability Management - Perform regular penetration testing and infrastructure/application security assessments. - Identify vulnerabilities across systems, applications, and networks. - Apply patches, fixes, and recommend security improvements. - Execute cloud environment hardening and security posture management to minimize risks. 4. Incident Response and Recovery - Lead organization-wide incident response efforts. - Develop and maintain playbooks for handling various security incidents. - Ensure resilience and recovery of systems after breaches or cyberattacks. - Implement and validate cloud backup, disaster recovery, and business continuity strategies. Policy and Compliance 5. Ensure Compliance with Standards - Develop, implement, and enforce security policies aligned with industry standards (e.g., SOC2, PCI, GDPR). - Experience of PCI DSS compliance is must - Conduct internal audits and support external compliance assessments. - Utilize cloud-native governance, risk, and compliance tools to maintain adherence with regulatory frameworks. 6. Documentation and Reporting - Maintain accurate records of security configurations, risk assessments, incidents, and response actions. - Prepare reports for IT leadership and auditors outlining security posture, incidents, and improvement initiatives. Collaboration and Education 7. Collaborate with Cross-Functional Teams - Partner with IT, DevOps, and software engineering teams to embed security throughout system development lifecycles (DevSecOps). - Review deployment pipelines and infrastructure as code for potential security gaps. - Ensure secure integration and monitoring within cloud-based CI/CD environments. 8. Security Awareness and Training - Deliver security awareness sessions to employees and stakeholders on best practices (e.g., phishing prevention). - Conduct tabletop exercises, drills, or simulations to validate incident response readiness. Qualifications & Skills - Strong experience in infrastructure and cloud security with hands-on implementation. - Proficiency in configuring and managing firewalls, IDS/IPS, VPNs, and endpoint security. - Experience in penetration testing, vulnerability scanning, and remediation strategies. - Solid knowledge of compliance frameworks (SOC2, PCI DSS, GDPR, ISO 27001). - Familiarity with cloud-native security services including SIEM/SOAR, workload protection, and governance tools. - Strong collaboration skills with cross-functional teams (IT, DevOps, Engineering). - Excellent problem-solving, documentation, and communication abilities. Why QualiZeal? Award-Winning Workplace: Certified as a Great Place to Work® and recognized by ET NOW as the Best Organization for Women in 2025. Proven Engagement: Industry-recognized client and employee Net Promoter Scores (NPS). Growth-Focused Culture: Equal-opportunity employer with a strong emphasis on leadership development, training, and continuous learning. Flexible & Supportive Environment: We value empathy, recognize contributions, and support work-life balance. Transparent Leadership: Open-book management with a collaborative, inclusive approach. Rapid Growth: 850+ professionals strong and on track to reach 3000+ employees — an exciting time to join. About QualiZeal: QualiZeal is North America's fastest-growing independent digital quality engineering services company. With a diverse portfolio of digital transformation services encompassing Quality Engineering, Digital Engineering, Advisory and Transformation, and Emerging Technology Testing, QualiZeal empowers organizations of all sizes globally to achieve quality excellence and sustainable market leadership. Trusted by 70+ global enterprises and with a headcount of 850+ elite software quality engineers, QualiZeal is pioneering AI-enabled Quality Engineering innovation. QualiZeal has consistently maintained an outstanding client Net Promoter Score (NPS) of over 75, reflecting its unwavering commitment to client satisfaction and service excellence.