Senior Cybersecurity Engineer / Cybersecurity Lead

About the role

We are looking for an experienced Senior Cybersecurity Engineer / Cybersecurity Lead to strengthen Dhaniti’s security posture across applications, infrastructure, cloud, networks, endpoints, identities, and development processes. This hands‑on role owns preventive, detective and corrective controls while partnering with engineering, DevOps, product and IT teams.

Key responsibilities

• Design and improve cybersecurity controls across applications, infrastructure, cloud, networks, endpoints and production environments.
• Conduct security assessments, vulnerability assessments, coordinate penetration testing and drive remediation.
• Establish security policies, standards, procedures, baselines, risk registers and documentation.
• Embed application security throughout the SDLC, reviewing APIs, micro‑services, authentication, authorization and third‑party integrations.
• Secure AWS, Azure and GCP environments including IAM, network controls, logging, encryption, containers, Kubernetes and storage.
• Implement DevSecOps practices and integrate security checks into CI/CD pipelines.
• Monitor security events, manage incident triage, investigation, containment, recovery and root‑cause analysis.
• Support network security – firewalls, WAF, VPN, IDS/IPS, segmentation, TLS/SSL, DNS and DDoS protection.

Required profile

• 5+ years of hands‑on professional cybersecurity experience covering application, infrastructure, cloud or production security.
• Strong practical experience in cloud security, application/API security, vulnerability management, IAM and incident response.
• Hands‑on experience securing production applications and cloud/containerized environments.
• Deep understanding of OWASP Top 10, API security, authentication/authorization, encryption and secure development practices.
• Proficiency with scripting/automation using Python, Bash or PowerShell.
• Based in Hyderabad or within reasonable commuting distance and able to work on‑site.

Required skills

• AWS, Azure, GCP security services
• Identity and Access Management (IAM, RBAC, MFA/SSO)
• SAST, DAST, SCA, container security tools
• Kubernetes and cloud‑native architectures
• CI/CD pipeline security integration
• SIEM platforms (Splunk, Microsoft Sentinel, ELK/OpenSearch, QRadar)
• EDR/XDR solutions
• Python, Bash, PowerShell scripting
• Firewalls, WAF, IDS/IPS, TLS/SSL, DNS, DDoS protection
• Compliance frameworks: ISO 27001, PCI DSS, SOC 2, NIST CSF, CIS Benchmarks