Security Architect
Techblocks —Hyderabad, Telangana
- Master's degree
- AWS
- Scripting
Quick apply
Senior Engineer - Data Architect
Stanley Black & Decker —Bellandur, Bengaluru, Karnataka
- Full-time
- Remote
- Azure
- SQL
- Software development
Senior DevOps Engineer
Easebuzz Pvt Ltd —Pune, Maharashtra
- Full-time
- DevOps
- AWS
- Scripting
Quick apply
Software Engineer (GoLang AND K8s AND AgenticAI)
Infoblox —Bengaluru, Karnataka
- Full-time
- Computer Science
- Java
- Master's degree
- Health insurance
- Paid time off
1d
Senior Software Quality Engineer
Trellix —Bengaluru, Karnataka
- Azure
- AWS
- Machine learning
- Health insurance
- Paid time off
Senior Platform Engineer — Infrastructure & DevOps
Anaqua —Hyderabad, Telangana
- Full-time
- English
- Java
- SQL
Quick apply
13d
Senior Platform Infrastructure Engineer
FNZ —Gurugram, Haryana
- Full-time
- Azure
- Computer Science
- DevOps
Senior Digital Marketing Executive
NSN Silver Mines —Erode, Tamil Nadu
- ₹30,000 - ₹50,000 a month
- Full-time
- Marketing
- Master's degree
- Analysis skills
- Cell phone reimbursement
- Flexible schedule
Quick apply
Test Automation Engineer
Accenture —Indore, Madhya Pradesh
- Full-time
- Azure
- Computer Science
- DevOps
Senior DevOps/GCP Cloud Engineer
Karma Group Global —Bellandur, Bengaluru, Karnataka
- Full-time
- Computer Science
- DevOps
- SQL
- Commuter assistance
- Paid time off
Quick apply
Site Reliability Engineer - SRE
Drivetrain AI —India
- Full-time
- Remote
- DevOps
- SQL
- AWS
(Sr.) SW Design Engineer (VSTO Add-Ins)
Helius Technologies —India
- Microsoft Outlook
- Computer Science
- Windows
Platform Reliability Engineer (SRE / DevSecOps)
Lifesight —India
- Full-time
- Azure
- Master's degree
- AWS
Software Architect - Lead Systems Engineer
AutoZone —India
- Full-time
- Azure
- Computer Science
- DevOps
7d
Solution Architect - Senior Systems Engineer
AutoZone —India
- Full-time
- Azure
- Computer Science
- DevOps
Principal Software Engineer 1 (NSG Firewall)
Sophos —India
- Remote
- Azure
- Computer Science
- Master's degree

Other jobs to consider

Find your next job by exploring related positions.

Jr. Full Stack Developer
Paradiso Software Pvt. Ltd —Remote
Care about shipping things that actually work, not just things that compile. SQL — comfortable writing SELECT, WHERE, JOIN, GROUP BY; understands relational…
₹3,00,000 - ₹5,00,000 a year
Quick apply
18h
Sr. Angular Developer
Freightcom —Remote
As a part of our Frontend Platform team, you will focus on transforming designs into production-ready code, fixing bugs, and implementing new features within…
₹10,00,000 - ₹15,00,000 a year
Quick apply
14d

I want to receive the latest job alerts for sr developer dns

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

sr developer dns jobs near

Platform Engineer jobs in Hyderabad, Telangana

Software Test Engineer jobs in Bengaluru, Karnataka

Software Engineer jobs in Bengaluru, Karnataka

Security Architect jobs in Hyderabad, Telangana

Engineering Lead jobs in Bengaluru, Karnataka

Engineering Lead jobs in Mumbai, Maharashtra

Civil Engineering jobs in Cannanore, Kerala

Intern, Engineering Mechanical jobs in Vadodara, Gujarat

Civil Engineering jobs in Greater Noida, Uttar Pradesh

Engineering Lead jobs in Delhi Cantonment, Delhi, Delhi

Intern, Engineering jobs in Mangalore, Karnataka

Engineering Lead jobs in Hubli, Karnataka

Reliability Engineer jobs in Gurgaon, Haryana

Maintenance Engineer jobs in Kerala

Reliability Engineer jobs in Delhi, Delhi

Design Engineer jobs in Ambala, Haryana

Remote Work Mechanical Engineer jobs in Chennai, Tamil Nadu

Reliability Engineer jobs in Gujarat

Reliability Engineer jobs in Gurugram, Haryana

R&d Engineer jobs in Pune, Maharashtra

Security Architect

Techblocks -
Hyderabad, Telangana

Quick apply

Job details

Qualifications

CI/CD
Penetration testing
TCP
Cloud infrastructure
Vulnerability assessment
Go
Law
MCP
Kubernetes
Master's degree
Bash (Unix shell)
RBAC
AWS
Cloud security
Metasploit
Continuous integration
REST
Scripting
Burp Suite
DNS
APIs
S3
Financial services
Nmap
TCP/IP
GraphQL
HTTPS
AI
System security
Python
PowerShell
Active Directory
Identity & access management

Full job description

Role Overview

The Principal Security Engineer – Offensive Security is an internal adversarial security practitioner embedded within Enterprise Solutions (ES). The role is responsible for independently testing and validating the security posture of ES applications, data platforms, and supporting cloud infrastructure.

This is a hands-on offensive security role, not a compliance or governance function. The engineer plans and executes red team operations, penetration tests, and adversarial simulations that reflect the techniques, tactics, and procedures of realistic threat actors – across application code, APIs, CI/CD pipelines, AWS infrastructure, multi-tenant platform boundaries, and AI/agentic system components.

Working in close partnership with ES product engineering teams, the role provides an independent adversarial perspective on implemented controls and remediations. Findings feed directly into the continuous improvement of security practices across ES engineering and inform risk decisions made by technology and business leadership.

Success is measured by the quality and realism of engagements, the reduction of exploitable risk in production systems, and the degree to which findings drive durable security improvement – not by volume of findings or compliance artefacts.

Key Responsibilities

Red Team Operations & Penetration Testing

Plan and execute red team engagements and penetration tests against web applications, APIs, internal services, and AWS cloud infrastructure, scoped and executed with clear rules of engagement.
Simulate realistic attacker TTPs aligned with threat intelligence and frameworks such as MITRE ATT&CK (Enterprise and Cloud), tailored to the organizational threat model.
Conduct full-scope assessments covering initial access, lateral movement, privilege escalation, persistence, and data exfiltration across application and cloud environments.
Perform cloud-specific attack path analysis including IAM privilege escalation, metadata service abuse, cross-account access, misconfiguration exploitation, and container or serverless escape techniques.
Execute CI/CD pipeline attack simulations covering supply chain compromise, secrets exposure, artifact tampering, and pipeline misconfigurations.
Assess and exploit vulnerabilities in authentication and authorisation mechanisms, business logic, APIs, and data handling processes.
Test multi-tenant platform boundaries to identify cross-tenant data access paths, context confusion, and shared-resource leakage.
Assess AI and agentic system components, including prompt injection, tool-call abuse, agent privilege escalation, model output manipulation, and MCP/orchestration layer attack surfaces.

Security Control Validation & Remediation

Independently validate the effectiveness of security controls implemented by engineering and platform teams, providing evidence-based assessments rather than checklist verdicts.
Re-test remediated vulnerabilities to confirm fixes are effective and do not introduce new risks.
Conduct adversarial reviews of proposed security architectures and AI/agentic system designs to identify potential bypasses, trust boundary violations, or design gaps.
Challenge security assumptions through realistic attack simulations and communicate the business impact of exploitable gaps clearly.

Vulnerability Assessment & Research

Perform application security assessments using structured methodologies including the OWASP Testing Guide, PTES, and emerging guidance for AI/LLM systems such as the OWASP Top 10 for LLMs.
Assess AWS and cloud infrastructure through configuration review, privilege analysis, network exposure mapping, and detection gap identification.
Assess data layer security including database access controls, ORM injection paths, data-tier privilege abuse, and financial data exfiltration routes.
Evaluate secrets management practices across repositories, environment configurations, serverless functions, and managed secrets services.
Research emerging attack techniques relevant to the ES technology stack and develop proof-of-concept exploits where appropriate.
Contribute to the vulnerability management lifecycle with accurate risk ratings, regulatory exposure context, and practical remediation guidance.

Purple Team Collaboration

Partner with Security Operations and Detection Engineering during purple team exercises to evaluate detection coverage and alert quality, producing ATT&CK coverage mapping and detection gap analysis as standard outputs.
Develop and share attack playbooks, indicators of compromise (IOCs), and detection recommendations informed by red team findings.
Identify and communicate logging and monitoring gaps uncovered during engagements, with specific attention to agentic workflow and API observability blind spots.

Reporting & Communication

Produce clear, professional assessment reports documenting attack narratives, findings, supporting evidence, risk ratings, and remediation recommendations – framed in terms of regulatory exposure where relevant (SOC 2, MiFID II, DORA).
Communicate findings effectively to both technical audiences (developers, engineers) and non-technical stakeholders (management, risk owners).
Maintain engagement and findings tracking; contribute to security metrics and risk reporting dashboards.
Present results in debrief sessions in a constructive, collaborative manner focused on risk reduction rather than fault.

Tooling & Continuous Improvement

Maintain and enhance the red team toolset including custom scripts, automation, and exploitation tooling aligned to the ES technology environment and threat model.
Develop internal tooling where commercial or open-source tools do not adequately cover ES-specific attack surfaces, particularly around agentic and multi-tenant systems.
Stay current on offensive security research, CVE disclosures, cloud provider security updates, and AI/LLM attack research.
Document methodologies, playbooks, and lessons learned to support programme maturity and knowledge transfer.

Required Qualifications

Technical Expertise

10+ years of hands-on experience in penetration testing, red teaming, or offensive security roles, with a track record of conducting full-scope assessments against complex, production systems.
Demonstrated experience with application security testing including web applications, REST and GraphQL APIs, authentication and authorisation flows, and common vulnerability classes.
Proven experience performing AWS cloud security assessments and exploiting cloud-specific attack paths including IAM, EC2, Lambda, S3, and ECS/EKS.
Experience testing multi-tenant systems, with the ability to identify and exploit tenant isolation failures, context confusion, and shared-resource leakage.
Practical experience assessing AI and agentic system security, including prompt injection, tool-call abuse, agent privilege escalation, and orchestration layer vulnerabilities. Familiarity with OWASP Top 10 for LLMs and emerging adversarial AI frameworks.
Experience assessing data layer security including database access controls, ORM injection paths, and data exfiltration techniques relevant to financial services environments.
Experience assessing secrets management posture across repositories, CI/CD pipelines, environment configurations, and managed secrets services.
Experience conducting threat modelling using STRIDE or comparable methodologies, including for AI/agentic system components.
Proficiency in at least one scripting or programming language (Python, Go, Bash, or PowerShell) sufficient to develop tooling, automate assessments, and understand application code under review.
Strong understanding of networking fundamentals: TCP/IP, DNS, TLS, and HTTP/S.
Strong understanding of Active Directory and associated identity-based attack techniques.
Experience assessing CI/CD platforms and identifying pipeline security weaknesses including supply chain and secrets exposure vectors.
Working knowledge of offensive security tools including Burp Suite, Metasploit, BloodHound, Nmap, Nuclei, and cloud-specific tooling such as Pacu, ScoutSuite, and Prowler.
Familiarity with defensive technologies including WAFs, EDR, SIEM platforms, and cloud-native security controls, sufficient to reason about detection gaps and evasion.
Ability to produce high-quality assessment reports that clearly articulate technical findings, business impact, and regulatory exposure to both engineering and senior business audiences.

Preferred Qualifications

Offensive Security Expertise

Experience with container and Kubernetes attack techniques including RBAC abuse, privilege escalation, secrets extraction, and container escape.
Familiarity with software supply chain and CI/CD attack vectors such as dependency confusion and artifact signing bypass.
Experience with OAuth 2.0 and OpenID Connect attack scenarios including token misuse, redirect abuse, and scope escalation.
Knowledge of serverless and cloud-native architectures and their associated attack surfaces.
Experience developing or extending offensive security tooling including custom payloads and evasion techniques.
Familiarity with API gateway and service mesh attack surfaces, including mTLS bypass and fine-grained authorisation abuse.

Quick apply

Refine Your Search

sr developer dns jobs

Security Architect

Senior Engineer - Data Architect

Senior DevOps Engineer

Software Engineer (GoLang AND K8s AND AgenticAI)

Senior Software Quality Engineer

Senior Platform Engineer — Infrastructure & DevOps

Senior Platform Infrastructure Engineer

Senior Digital Marketing Executive

Test Automation Engineer

Senior DevOps/GCP Cloud Engineer

Site Reliability Engineer - SRE

(Sr.) SW Design Engineer (VSTO Add-Ins)

Platform Reliability Engineer (SRE / DevSecOps)

Software Architect - Lead Systems Engineer

Solution Architect - Senior Systems Engineer

Principal Software Engineer 1 (NSG Firewall)