Lead Security (Ahmedabad)

Job Description We're looking for a highly capable Lead Security & DevSecOps Engineer who will own the organization's security posture across infrastructure, applications, cloud platforms, and engineering practices. This role reports directly to the CTO and will be responsible for driving day-to-day security operations while partnering closely with Engineering, Infrastructure, Product, and external security vendors. This is not a CISO role. It is a hands-on technical leadership position for someone who enjoys building secure systems, improving engineering practices, and leading security initiatives across the organization. What You'll Do Security Strategy & Operations - Own the organization's day-to-day security operations. - Build, implement, and continuously improve enterprise security practices. - Define security standards, policies, and operational procedures. - Lead incident response, forensic investigations, root cause analysis, and post-incident reviews. - Maintain and continuously improve the organization's overall security posture. Cloud & Infrastructure Security - Secure AWS infrastructure and cloud services. - Design and implement IAM best practices and least-privilege access. Manage encryption, secrets management, key rotation, and certificate lifecycle. - Secure VPCs, networking, WAFs, CloudFront, load balancers, VPNs, and public-facing services. - Perform periodic security reviews of cloud architecture. DevSecOps - Integrate security throughout the CI/CD pipeline. - Automate security testing and policy enforcement. - Implement SAST, DAST, dependency scanning, container image scanning, and Infrastructure-as-Code security. - Work closely with engineering teams to ensure security is embedded into the Software Development Lifecycle (SDLC). - Establish security gates before production deployments. Security Monitoring & SOC Management - Own Security Operations Center (SOC) activities. - Manage with third-party SOC vendors. - Build centralized loggin .