Senior Lead Engineer, Information Security

Design, implement and maintain enterprise security controls across cloud, infrastructure, applications, and Web Application Firewall (WAF) systems.

Develop and automate security processes integrated into CI/CD pipelines, including vulnerability management, policy enforcement, and remediation tracking.

Lead offensive security activities such as penetration testing, red team exercises, and threat modeling to identify and remediate security risks in applications and APIs.

Work Experience Required: Not explicitly mentioned in the JD.

Strong hands-on experience with security engineering, application security, and automation in cloud and software delivery environments.

Proficiency in designing and maintaining Web Application Firewalls (WAF) and related security rule tuning.

Experience with CI/CD pipeline integration and security automation tools including GitHub Actions or equivalents.

Experienced in leading security engineering projects involving application and cloud security at scale.

Skilled in both defensive (controls, automation) and offensive (penetration testing, red teaming) security practices.

Capable of collaborating closely with engineering and infrastructure teams to embed security into software development lifecycle and operations.