ASCENRA Technologies is looking for a Lead Security Engineer to own security across its cloud infrastructure, applications, cryptography, CI/CD pipelines, and incident response. This is a senior individual contributor role with ownership of security architecture and engineering decisions.

Key Responsibilities

• Own cloud and application security architecture across the platform.
• Design and manage encryption, key management, certificate lifecycle, and mTLS.
• Secure AWS infrastructure including IAM, KMS, VPC, SCPs, CloudTrail, GuardDuty, and Security Hub.
• Lead application security for JavaScript/TypeScript-based applications, including authentication, authorization, API security, and multi-tenant isolation.
• Develop and maintain threat models and security controls.
• Implement security gates across CI/CD, including SAST, SCA, secrets, and IaC scanning.
• Lead security incident response and post-incident reviews.
• Conduct security assessments, penetration testing, VAPT, and tenant-isolation testing.
• Develop security automation using Python or Shell and implement Terraform security guardrails.
• Support compliance and security assurance activities across frameworks such as ISO 27001, ISO 27701, DPDP, GDPR, and SOC 2.
• Guide engineering teams on secure-by-design practices and security standards.

Required Skills & Qualifications

• 7+ years of experience in security engineering.
• 3+ years as a Senior/Lead Security Engineer owning security decisions for a production software product.
• Strong hands-on experience with AWS security and cloud architecture.
• Strong knowledge of applied cryptography, encryption, KMS/HSM, certificate management, and mTLS.
• Experience with application security, OAuth2/OIDC, JWT, authorization, and OWASP Top 10/API Security.
• Experience with threat modelling and security architecture reviews.
• Hands-on experience with SAST, SCA, secrets scanning, and IaC security in GitLab/GitHub.
• Proven incident response and incident management experience.
• Strong knowledge of Terraform and Python/Shell scripting.
• Ability to assess security risks and communicate technical decisions clearly.

Good to Have

• Experience with tamper-evident/append-only systems, hash chaining, Merkle trees, or signed receipts.
• Experience with BYOK/HYOK, HSM, or KMIP.
• Experience with CNAPP/CSPM tools such as Wiz.
• Knowledge of AI/LLM security, Amazon Bedrock, RAG, and vector databases.
• Experience with SBOM, signed releases, and software supply-chain security.
• Experience working with ISO 27001/27701, DPDP, GDPR, or SOC 2.
• Security certifications such as CISSP, CCSP, OSCP, or AWS Certified Security – Specialty.

Education

B.E./B.Tech or M.Tech in Computer Science / Information Technology

Why Join Ascenra Technologies?

• Own the security function for a new technology platform.
• Work on complex challenges across cloud, application, cryptography, and data security.
• High ownership and direct impact on security architecture and controls.
• Opportunity to build security practices from the ground up.