Security Apps & Operations Engineer in GURUGRAM, Haryāna at Rediminds

About Rediminds

At RediMinds, we build AI-enabled systems that help complex industries operate better, faster, and more intelligently. Our work spans healthcare, legal, finance, government, and other high-impact domains where software quality, trust, and speed truly matter.

We are a growing, entrepreneurial team that values ownership, clarity, compassion, and technical excellence. We're looking for builders who want to grow with us, contribute meaningfully, and be part of a team creating real products with real-world impact.

RediMinds — building the future with people who care enough to get the details right.

RediMinds, Inc. is an Equal Opportunity Employer. We are committed to creating an inclusive environment for all employees and applicants and prohibit discrimination and harassment of any kind. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, age, national origin, disability, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.

Role Summary

We are looking for a motivated Security Apps & Operations Engineer to join our security team. In this role you will be responsible for securing our applications and cloud infrastructure, operating and tuning our SIEM/SOC tooling, and embedding security practices into the software development lifecycle (DevSecOps). You will work cross-functionally with engineering, IT, and compliance teams to identify risks, respond to threats, and continuously improve our security posture. This is a rotational shift role with overlap with US hours.

Key Responsibilities

Application Security & DevSecOps

• Integrate security tooling (SAST, DAST, SCA) into CI/CD pipelines and enforce security gates.

• Conduct vulnerability assessments and coordinate remediation with development teams.

• Perform threat modeling and security code reviews for new features and major changes.

• Maintain and improve application security standards, policies, and secure coding guidelines.

• Track and report on vulnerability metrics, SLA adherence, and risk exposure.

Cloud Security (AWS / Azure / GCP)

• Monitor and enforce cloud security configurations using tools such as AWS Security Hub, Azure Defender, or GCP Security Command Center.

• Manage Identity and Access Management (IAM) policies, least-privilege principles, and privilege access controls across cloud environments.

• Perform cloud infrastructure security reviews and ensure compliance with CIS Benchmarks and organizational standards.

• Respond to cloud security incidents and misconfigurations, driving root-cause analysis and remediation.

SIEM & SOC Operations

• Operate, tune, and maintain SIEM platforms (e.g., Splunk, Microsoft Sentinel, or equivalent).

• Develop and maintain detection rules, correlation queries, and alerting logic to reduce noise and improve fidelity.

• Triage and investigate security alerts; escalate confirmed incidents following the IR playbook.

• Create dashboards and reports to surface key security metrics for stakeholders.

• Participate in on-call rotation for security incident response.

General Operations

• Support audit activities (SOC 2, ISO 27001, or similar) by providing evidence and remediating findings.

• Document runbooks, playbooks, and standard operating procedures.

• Stay current with the threat landscape, emerging CVEs, and security tooling developments.

• Contribute to day-to-day security operation (monitoring)

Requirements

Experience & Education

• 2 – 3 years of hands-on experience in an application security, security operations, or similar role.

• Bachelor's degree in Computer Science, Information Security, or equivalent practical experience.

Technical Skills

• Proficiency with at least one major cloud platform (AWS, Azure, or GCP) and its native security services.

• Experience with SIEM platforms (Splunk, Sentinel, Elastic Security, or similar) — including writing queries/rules (SPL, KQL, etc.).

• Familiarity with DevSecOps tooling: SAST (e.g., Semgrep, SonarQube), DAST (e.g., OWASP ZAP, Burp Suite), SCA (e.g., Snyk, Dependabot).

• Understanding of OWASP Top 10, CVE scoring, and vulnerability management workflows.

• Scripting ability in Python, Bash, or PowerShell for automation and tooling.

• Working knowledge of networking concepts (TCP/IP, DNS, TLS, firewalls, proxies).

Soft Skills

• Clear written and verbal communication — able to explain technical risk to non-technical stakeholders.

• Detail-oriented with strong analytical and problem-solving skills.

• Collaborative team player who thrives in a fast-paced, cross-functional environment.

Preferred Qualifications

• Industry certifications such as CompTIA Security+, AWS Security Specialty, GCIA, GCSA, CEH, or equivalent.

• Experience with container security (Docker, Kubernetes) and infrastructure-as-code security scanning (Terraform, CloudFormation).

• Familiarity with compliance frameworks: SOC 2, ISO 27001, NIST CSF, or PCI-DSS.

• Prior exposure to incident response or digital forensics workflows.

• Experience with ticketing and ITSM platforms (Jira, ServiceNow).

What We Offer

• Competitive salary and performance-based bonus.

• Comprehensive health, dental, and vision benefits.

• Support for professional certifications and continuous learning.

• Flexible work arrangements.

• Collaborative, security-first culture where your work has real impact.