Cyber Hygiene Security Engineer / Developer

Overview

Design and build security integrations, automation workflows and scalable solutions that support Cyber Hygiene operations across cloud and application environments, working closely with Security, Engineering and DevSecOps teams to reduce risk and improve remediation effectiveness.

What you'll do

• Develop and maintain security automation and integrations across platforms such as Prisma Cloud, Brinqa, ServiceNow and ACS solutions.
• Build APIs, dashboards, reporting and workflow automation to improve security operations.
• Support CSPM, CWPP, vulnerability management and exposure management capabilities.
• Integrate Application Security Code Scanning (ACS) solutions into SDLC and CI/CD pipelines.
• Collaborate with application and cloud teams to identify, prioritize and remediate security findings.
• Implement secure-by-design controls and DevSecOps practices.
• Produce technical documentation, standards and solution designs.
• Support audit, compliance and regulatory requirements through automated reporting and controls.

What you'll need

• 5+ years of experience in Software Engineering, Security Engineering or DevSecOps.
• Strong programming skills in Python, Java, Go, C#, or JavaScript.
• Experience with REST APIs, microservices and CI/CD pipelines.
• Hands-on experience with GCP, Azure or AWS.
• Knowledge of Kubernetes, Docker, Terraform and cloud-native architectures.
• Experience with vulnerability management and cloud security.
• Familiarity with Prisma Cloud (CSPM/CWPP), Brinqa, Tanium and ServiceNow.
• Understanding of CVE management, CVSS scoring and remediation workflows.
• Experience with Application Security Code Scanning (ACS) solutions.
• Understanding of SAST, DAST, SCA and secure coding practices.
• Experience reviewing and remediating application security findings.
• Good understanding of OWASP Top 10 security risks and their remediation.
• Experience working with developers to identify and remediate vulnerabilities such as Injection, Broken Access Control, Security Misconfiguration, Vulnerable Components, Authentication Issues and SSRF.
• Ability to translate security findings into practical remediation guidance for engineering teams.

Nice to have

• Security certifications (CISSP, CCSP, GCP Security Engineer, CSSLP, Security+).
• Experience in cloud security and regulated enterprise environments.
• Knowledge of DevSecOps and security automation best practices.
• Proven ability to leverage AI tools to enhance productivity and optimise workflows, applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Details

• Location: Pune, India.
• Corporate title: Associate.