Senior Security Engineer

Title: Senior Security Engineer

Location: Hyderabad, India (Need to work from Experian- Hyderabad office at least 3 days in a week from day one)

Experience: 6+

Job Description:

As a Security Engineer, you will be a key contributor to the design, implementation, and continuous improvement of security controls across our cloud and on-premises infrastructure. Your primary focus will be to safeguard systems, data, and services by identifying vulnerabilities, assessing risks, and deploying scalable, resilient security solutions. You will collaborate with engineering, IT, and compliance teams to ensure alignment with security frameworks, regulatory requirements, and industry best practices. This role demands a proactive mindset, deep technical expertise, and a commitment to building secure-by-design architectures that support business agility without compromising protection.

• Design, implement, and manage secure environments using AWS services and on-prem infra, ensuring adherence to security best practices and compliance requirements.
• Develop and enforce security policies, procedures, and technical controls for cloud and on-prem infrastructures, with a focus on robust IAM configurations and access governance.
• Build and maintain Terraform modules to automate the secure provisioning of cloud resources, embedding security and compliance into infrastructure-as-code workflows.
• Conduct regular security audits, risk assessments, and vulnerability scans, identifying and remediating misconfigurations and threats across cloud environments.
• Collaborate with development and DevOps teams to integrate security into CI/CD pipelines, promoting secure coding practices and automated security checks.
• Implement and manage endpoint protection solutions, ensuring device compliance, threat prevention, and secure access for users.
• Monitor and providing cloud environments for threats, anomalies, and vulnerabilities, leveraging AWS-native and third-party tools to detect and respond to security incidents.
• Demonstrated ability to implement security best practices such as encryption at rest/in transit, network segmentation, secure logging, and automated remediation.
• Proven experience in cloud security engineering, with deep knowledge of AWS services and architecture.
• Support executive status reporting, current state assessments, future state roadmaps, IT strategy, and transition planning for technology modernization and continuous security enhancements.
• Facilitate program-level execution across multiple delivery teams working across organizational boundaries to define security roadmaps and program interdependencies within the Agile methodology practiced in our team
• Facilitate delivery of tech-enabled projects, including analyzing workflows and helping establish priorities based on standards, policies, and best-practices.
• Proven track record of implementing security best practices in cloud environments, including network segmentation, encryption, and logging.
• Strong scripting and automation skills (e.g., Python).
• Excellent analytical, communication, and collaboration skills, with a track record of working cross-functionally to drive secure outcomes.

Qualifications:

• Bachelor's degree in Computer Science or related.
• Minimum of 5+ years of experience in a security-related role.
• Experience with identity management solutions such as LDAP, AWS IAM, SSO
• Familiarity with scripting languages such as bash and python, automation tools such as Ansible, and programming languages (example -Java, Scala)
• Strong background in network, endpoint, and cloud security
• Familiarity with endpoint protection, and encryption.
• Strong understanding of Agile methodology including JIRA and Confluence
• Understanding of software development life cycle processes and ability to acquire the necessary technical overview of software products
• Experience with project status reporting and facilitating meetings
• Experience in cyber security stack, and tools for on-prem and cloud hosted systems
• Understand technical implementation at the architecture level and propose technical alternatives
• Understanding of systems infrastructure, network interfaces, API's, and applications architecture
• Broad domain and technical knowledge related to data.