SE- Security Engineer

Location: Noida, India

Department: Cloud Ops - SRE

Experience: 2-4

Skills: AI Engineering, Agentic AI, DEVSECOPS, INFOSEC

• Support incident response activities by using AI-driven detection, correlation, and root-cause analysis tools under the guidance of senior engineers to speed up triage.
• Help operate and monitor existing AI security sub-agents (covering areas such as vulnerability scanning, threat intel, and vendor risk), flagging anomalies or failures for senior review.
• Assist in documenting and following up on AI-assisted incident findings, including tracking remediation actions through to closure.

• Assist in triaging vulnerability scan results using risk-based prioritization supported by intelligent vulnerability analysis tooling (SAST/SCA, EASM, container scanning)
• Support cloud security posture reviews by using predictive analytics and intelligent monitoring dashboards, escalating notable trends to senior team members.

• Help monitor and tune WAF policies using behavioral analytics and anomaly detection dashboards, under supervision, and learn to interpret traffic pattern alerts.

• Participate in architecture and design reviews that use automated threat modeling tools, learning how AI-agent risk (e.g., prompt injection, authorization gaps, secrets exposure) is assessed and documented.
• Assist in tracking action items from the AI-risk remediation roadmap and help prepare status updates for stakeholders.

• Support the implementation of security controls within CI/CD pipelines, learning automation-first and AI-augmented approaches and shift-left practices from senior engineers.
• Help integrate basic AI-assisted checks (e.g., secret-scanning, dependency checks) into the development lifecycle.

• Support multiple concurrent security initiatives using AI-enabled workflow and tracking tools shared across SRE and Security teams.
• Help promote a security-first culture by learning and sharing data-driven, AI-backed security practices with the wider team.

• Foundational knowledge of container, application, and cloud security concepts, with interest in automated risk detection tooling.
• Exposure to static and dynamic application security testing tools, including basic code analysis.
• Basic understanding of API and web/mobile application security testing concepts.
• Interest in penetration testing and threat assessment fundamentals; willingness to learn AI-assisted reconnaissance techniques.
• Familiarity with threat detection and response concepts, including behavioral analytics and anomaly-based detection.
• Some hands-on exposure to security automation or scripting (Python, Bash, or similar).
• Basic exposure to cloud security posture management (CSPM) and continuous monitoring concepts.
• Interest in observability and monitoring, and a willingness to learn predictive analytics and anomaly detection.

• 1–3 years of experience in cloud security, IT security, or a related engineering role, with an eagerness to build deeper expertise in infrastructure as code.
• Some exposure to cloud-native logging and monitoring tools; interest in AI-driven alerting and noise reduction.
• Basic familiarity with WAF concepts and a willingness to learn adaptive rule tuning.
• Coursework or hands-on exposure to security monitoring and observability platforms.
• Exposure to CI/CD pipelines and interest in integrating security controls and shift-left practices.
• Basic understanding of vulnerability management concepts and risk-based prioritization.
• Awareness of common compliance frameworks (PCI-DSS, SOC2, SOX, HIPAA).
• Beginner-to-intermediate familiarity with Infrastructure as Code tools (Terraform, Ansible, or CloudFormation).
• Willingness to learn incident management processes, including AI-assisted triaging.
• Strong analytical and problem-solving skills, with curiosity to assess simple architectures for vulnerabilities under senior guidance.
• Interest in learning how security policies, standards, and governance frameworks are developed and maintained, including for AI-agent usage.