Job Description

5 - 7 Years
1 Opening
Bangalore

Role description

Who we are:

At UST, we help the world's best organizations grow and succeed through transformation. Bringing together the right talent, tools, and ideas, we work with our client to co-create lasting change. Together, with over 30,000 employees in 30+ countries, we build for boundless impact--touching billions of lives in the process. Visit us at .

Summary:

UST is looking for a

Security Engineer - Infrastructure Security (DevSecOps)

to strengthen and advance the organization's security posture across cloud and infrastructure platforms.

The Opportunity:

UST is seeking an innovative, self-driven

Security Engineer

who can guide, influence, and implement security best practices across cloud infrastructure--primarily AWS. The engineer will act as an advocate for secure implementations, driving infrastructure hardening, cloud compliance, and DevSecOps security automation. The ideal candidate is a security generalist with deep expertise in application and cloud infrastructure security, along with strong communication and advisory skills.

Key Roles & Responsibilities:

Serve as the Security Engineer for infrastructure security and build a strong security posture for cloud environments.*
Perform hands-on mitigation of cloud non-compliances, preferably within AWS.*
Contribute to and enhance the technology risk management program; conduct security risk assessments and rank risks by business impact.*
Document assessment findings, propose mitigation strategies, and present results to stakeholders.*
Manage and evaluate compliance frameworks such as CCF, CIS, NIST; document corrective action plans for identified gaps.*
Identify and resolve security issues across cloud infrastructure.*
Work with DevOps teams to harden containers and streamline infrastructure deployments aligned with security policies.*
Drive continuous cloud compliance monitoring and advise DevOps teams on remediation.*
Contribute to Terraform scripting for Infrastructure-as-Code (IaC).*
Design, implement, and manage Kubernetes network policies to strengthen security.*
Create, update, and maintain threat models for infrastructure and software projects.*
Perform manual and automated secure code reviews, including Terraform and automation scripts.*
Conduct adversarial security analysis using cutting-edge and open-source tools.*
Influence engineering processes and priorities to produce stronger security outcomes.*
Support security controls, IT security frameworks, audits, and assessments.*

What you need:

Required Skills:

Experience planning, researching, and designing security architectures.

Strong understanding of cloud infrastructure risks and compliance (preferably

AWS

). Knowledge of

cryptography

, PKI,

OWASP

,

NIST

,

CIS benchmarks

, and

DevSecOps

principles. Expertise in CI/CD pipeline design and integration. Proficiency with

Terraform

, Apache

Kafka

, and API security. Scripting experience in

Ruby, Scala, Java

. Strong experience in code review (tools & manual). Expertise in

containerization

, vulnerability management, and

AWS cloud security

.

Desired Skills:

Experience deploying and securing solutions in multi-cloud environments.

Hands-on penetration testing experience for applications and APIs. Working knowledge of network protocols, cloud services, Kubernetes, and Kafka architecture. Familiarity with threat modeling methodologies such as STRIDE, MITRE ATT&CK. Deep expertise in Terraform, NIST, CIS benchmarks, Scala security, and application security.

Qualification:

8+ years of experience in information security (minimum 6+ years overall with 3+ years in DevSecOps required). Cloud certifications preferred (especially

AWS

). Strong hands-on skills in AWS cloud infrastructure. Background in audits, control assessments, or risk assessments.

What we believe:
We're proud to embrace the same values that have shaped UST since the beginning. Since day one, we've been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone, to champion diversity and inclusion and to place people at the centre of everything we do.

Humility:
We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:
Through business, we will better the lives of those less fortunate than ourselves.

Integrity:
We honour our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement


UST is an Equal Opportunity Employer. We believe that no one should be discriminated against because of their differences, such as age, disability, ethnicity, gender, gender identity and expression, religion, or sexual orientation.


All employment decisions shall be made without regard to age, race, creed, colour, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.


To support and promote the values of UST.*


Comply with all Company policies and procedures*

Skills

Kubernetes,Terraform,Iam

About UST

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world's best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients' organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact--touching billions of lives in the process.