Senior Lead Engineer - Security Consultant

1.Security Assessment & Risk Management

• Architect  enterprise-wide Application Security (AppSec) programs across complex, distributed enterprise environments—embedding SAST, DAST, and SCA into CI/CD pipelines to enable secure-by-design architecture and reduce vulnerabilities.
  
• Define secure architecture patterns and guardrails, integrating AppSec controls into DevSecOps pipelines to standardize risk management across distributed engineering teams.
  
• Collaborated with Customer Security teams to embed security architecture principles to produce secure project environment.
  
• Experience in Application Security  governance frameworks, aligning with NIST, ISO 27001, and PCI DSS to achieve compliance posture and audit readiness
  
• Conduct security risk assessments, vulnerability assessments, and threat modeling across applications, infrastructure, and networks.
  
• Identify security gaps and provide risk-based mitigation recommendations.
  
• Perform periodic security posture reviews and maturity assessments.
  

2.Security Architecture & Solution Design

• Design and review secure architecture for applications, cloud, and on-premise systems.
  
• Ensure security-by-design principles are embedded in system development and integration.
  
• Review technical designs to ensure alignment with security standards and best practices.
  

3.Application & Infrastructure Security

• Support and define application security testing (SAST, DAST, API security testing).
  
• Support secure coding practices and review source code for vulnerabilities.
  
• Assess infrastructure security including servers, databases, networks, and endpoints.
  

4.Cloud & DevSecOps Security

• Implement and review cloud security controls for AWS, Azure, or GCP environments.
  

• Integrate security tools into CI/CD pipelines (DevSecOps).
  
• Lead full-lifecycle SIEM deployments, from HLD/LLD design through to steady-state operations.
  
• Produce detailed solution proposals, policies, and procedures to support secure, reliable SIEM services
  
•  Ensure secure configuration, identity access management, and logging in cloud platforms.
  

5.Security Operations & Incident Management

• Support security incident detection, response, and investigation activities.
  
• Perform root cause analysis and recommend corrective and preventive actions.
  
• Coordinate with SOC, IT, and business teams during security incidents.
  

6.Compliance & Governance

• Ensure compliance with security frameworks and regulations (ISO 27001, NIST, GDPR, etc.).
  
• Support internal and external security audits and risk assessments.
  
• Develop and maintain security policies, standards, and procedures.
  

7.Awareness & Stakeholder Engagement

• Provide security guidance to development, infrastructure, and business teams.
  
• Conduct security awareness sessions and training programs.
  
• Act as a trusted advisor on security best practices and emerging threats.
  

8.Continuous Improvement & Reporting

• Stay updated with latest cyber security threats, vulnerabilities, and trends.
  
• Prepare security assessment reports, dashboards, and risk summaries for management.
  
• Recommend continuous improvements to enhance organizational security posture.
  

• CISSP (Certified Information Systems Security Professional).
  
• CISM (Certified Information Security Manager).
  
• CEH (Certified Ethical Hacker).
  
• ISO/IEC 27001 Lead Implementer or Lead Auditor.
  
• AWS / Azure / GCP Security Certification.
  
• CompTIA Security+ (added advantage).
  

• Strong knowledge of cyber security principles, tools, and frameworks.
  
• Hands-on experience with vulnerability assessment and penetration testing tools.
  
• Experience in application, infrastructure, and cloud security.
  
• Knowledge of security compliance and regulatory standards.
  
• Understanding of networking, operating systems, and databases.
  
• Strong documentation, reporting, and stakeholder communication skills.