Senior Security Engineer
Key Skills for This Role
Full Job Posting
Why AIS?
When you join AIS, you’re joining a mission-driven team that’s passionate about making a difference. You’ll work on projects that matter, alongside industry-leading experts, in an environment that fosters innovation, driving client success, and empowering our team to make a lasting impact. As an employee-owned company, we value collaboration, inclusivity, continuous growth, and shared success.
Employee Ownership: Your contributions directly impact the company’s success, and you share in its achievements.
Continuous Learning: Access to resources, training, and mentorship to support your professional growth.
Inclusive Culture: A workplace where diversity is celebrated, and everyone’s voice is valued.
Mission-Driven Work: Engage in projects that make a meaningful difference for our clients and communities.
What are we looking for?
At AIS, we're looking for more than just skills - we're looking for driven individuals who are passionate about making a difference, eager to grow, and aligned with our core principles.
Working@AIS
At AIS, we are dedicated to providing our employees with diverse opportunities to grow their careers while supporting a variety of impactful projects. For this position, we are seeking a talented individual to join AIS as a Senior Security Engineer.
Core Knowledge & Skills: Designs secure architectures, leverages advanced threat detection, leads incident response, and implements security automation.
Work & Complexity: Manages complex incidents, conducts threat analysis, leads audits, and implements process improvements.
Quality & Independence: Delivers high-quality reports, aligns practices with industry standards, and operates with high autonomy.
Teamwork & Communication: Leads team projects, collaborates cross-functionally, mentors juniors, and resolves conflicts.
Consulting & Engagement: Provides strategic consulting, leads improvement initiatives, recommends advanced technologies, and manages vendor relationships.
As your initial project assignment, you will support the unique needs of our client as a Senior Security Engineer.
Project Summary
We are seeking a hands-on Senior Security Engineer to lead vulnerability remediation across a multi-subscription Azure environment. The role spans infrastructure, application, platform, and identity related findings, including access reviews and exposed credentials. The person will track remediation against defined timelines, support audits and compliance reviews, and report on risk trends from internal, external, and vendor sources. Automation and repeatable processes are central to the work, and the role requires enough technical depth to build and maintain that automation. The person will also support broader security initiatives as priorities shift.
Key Responsibilities
- Cloud & Infrastructure Security Remediation:
- Remediate vulnerabilities across multiple Azure subscriptions
- Address findings from Wiz (CSPM/CNAPP) and External scanning platforms (RiskRecon, Security Scorecard, etc.)
- Investigate and resolve infrastructure-level security risks across Cloud resources (IaaS / PaaS), Networking components, Storage and supporting services
- Vulnerability Management & Patching:
- Assist in remediation of OS and infrastructure vulnerabilities, including OS patching and hardening (Windows / Linux), VM OS updates and lifecycle management
- Identify and address end-of-life (EOL) systems and dependencies
- Establish repeatable processes for Patch management, Vulnerability tracking and reporting, Risk prioritization
- Application Security Remediation:
- Partner with development teams to remediate SAST findings (e.g., Snyk), DAST findings (e.g., Invicti), Open-source library vulnerabilities, Penetration Testing Findings
- Support secure configuration of application environments
- DevSecOps & Automation:
- Integrate security into Azure DevOps CI/CD pipelines where applicable
- Improve overall DevSecOps maturity
- Security Program Support:
- Support assigned security program initiatives as directed by leadership
- Assist with security review documentation for client and audit requests
- Contribute to remediation tracking and reporting across security workstreams
- Observability & Reporting:
- Analyze and prioritize vulnerabilities based on Severity (CVSS), Exploitability, Business impact
- Provide regular updates on Remediation progress, Risk reduction trends, Outstanding issues
- Strong experience in Microsoft Azure PaaS and IaaS resources, networking, identity, storage
- Hands-on expertise with Systems administration and patching (Windows, Linux, etc.), Infrastructure vulnerability remediation
- Familiarity with Wiz or similar CSPM/CNAPP tools, Vulnerability scanners (Nessus, Qualys, etc.), Azure Policy
- Experience with SAST/DAST tools (Snyk, Invicti, etc.), Dependency and open-source vulnerability remediation
- Understanding of Cloud security best practices, Secure configuration standards (CIS, NIST, etc.)
Required Skills & Experience
Core Technical Skills:
Strong experience in Microsoft Azure PaaS and IaaS resources, networking, identity, storage
Hands-on expertise with Systems administration and patching (Windows, Linux, etc.), Infrastructure vulnerability remediation
Familiarity with Wiz or similar CSPM/CNAPP tools, Vulnerability scanners (Nessus, Qualys, etc.), Azure Policy
Security & DevOps:
Experience with SAST/DAST tools (Snyk, Invicti, etc.), Dependency and open-source vulnerability remediation
Understanding of Cloud security best practices, Secure configuration standards (CIS, NIST, etc.)
Nice to Have Skills
Experience with Azure Automation / Update Management, Infrastructure as Code (Terraform, ARM, Bicep, etc.), CI/CD pipelines (Azure DevOps, GitHub Actions, etc.), Penetration Testing
Familiarity with Risk scoring platforms (SecurityScorecard, RiskRecon), Monitoring Tools (DataDog, Grafana, etc.)
Preferred Qualifications
- Skills
- Experience with Azure Automation / Update Management, Infrastructure as Code (Terraform, ARM, Bicep, etc.), CI/CD pipelines (Azure DevOps, GitHub Actions, etc.), Penetration Testing
- Familiarity with Risk scoring platforms (SecurityScorecard, RiskRecon), Monitoring Tools (DataDog, Grafana, etc.)
About Applied Information Sciences
Provides cloud transformation and custom software engineering services.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Applied Information Sciences
QA Automation Engineer
Hyderabad, IND
Data Engineer
Hyderabad, IND
Senior FullStack Developer
Hyderabad, IND
Senior Business Analyst
Hyderabad, IND
Software Development Engineer in Test
Hyderabad, IND
Full Stack Developer
Hyderabad, IND
Lead Software Engineer
Hyderabad, IND
Full Stack Developer
Hyderabad, IND