Phonon Communications - SecOps Engineer - Terraform

Job Title : SecOps Engineer. Location : Vadodara, India (Onsite). Employment Type : Full-Time. Experience : 3-7 Years. About Phonon Communications Pvt Ltd : Phonon is a leader in CPaaS (Communications Platform as a Service) and CCaaS (Contact Center as a Service) solutions, serving the BFSI, Travel & Aviation sectors. With a mission to deliver tangible business results through seamless automation and intelligent digital communication, we empower businesses with cutting-edge solutions in voice, messaging, and AI-driven customer engagement. As part of our commitment to security and operational excellence, we are looking for a SecOps Engineer to strengthen our cloud security, compliance, and threat management capabilities. Role Overview : As a SecOps Engineer, you will be responsible for ensuring the security, compliance, and operational resilience of our AWS cloud infrastructure and IT systems. You will work closely with our DevOps, IT, and security teams to identify risks, mitigate vulnerabilities, and automate security processes while ensuring compliance with industry standards. Key Responsibilities : Security Operations & Compliance : - Implement and maintain AWS security best practices, including IAM, Security Groups, KMS, WAF, and GuardDuty. - Monitor, detect, and respond to security incidents using SIEM tools and AWS Security Hub. - Conduct regular vulnerability assessments and penetration testing to identify and mitigate risks. - Ensure compliance with industry standards (ISO 27001, SOC 2, GDPR, NIST, and CIS benchmarks). - Manage security logs, alerts, and events using AWS CloudTrail, CloudWatch, and OpenSearch. Infrastructure & Cloud Security : - Design and enforce secure cloud architectures aligned with AWS Well-Architected Framework. - Secure AWS services such as EC2, S3, RDS, Lambda, and Kubernetes (EKS) against threats. - Automate security configurations using Terraform, CloudFormation, or AWS CDK. - Implement network security controls, including VPC segmentation, VPNs, and firewalls. Incident Response & Threat Management : - Develop and execute Incident Response (IR) plans for security breaches and cyber threats. - Investigate security anomalies, conduct forensic analysis, and implement mitigation strategies. - Work with IT and DevOps teams to apply security patches and system updates promptly. DevSecOps & Automation : - Integrate security tools within CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI). - Automate security scanning using SAST, DAST, SCA tools and infrastructure monitoring solutions. - Implement container security solutions (Falco, Aqua Security, AWS Inspector) for Kubernetes workloads. Identity & Access Management (IAM) : - Implement Role-Based Access Control (RBAC) and Principle of Least Privilege (PoLP) policies. - Manage identity, authentication, and authorization using AWS IAM, SSO, and MFA. - Monitor and manage API keys, privileged access, and session controls. Required Skills & Experience : - 3-7 years of experience in Security Operations (SecOps), Cloud Security, or DevSecOps. - Strong knowledge of AWS security services (IAM, Security Hub, GuardDuty, WAF, Shield). - Proficiency in Linux, shell scripting, Python, or PowerShell for security automation. - Experience with SIEM tools (Splunk, ELK Stack, AWS OpenSearch, or equivalent). - Hands-on expertise in network security, firewalls, IDS/IPS, and VPNs. - Experience with container security (Docker, Kubernetes, EKS, Istio). - Familiarity with security compliance frameworks (ISO 27001, SOC 2, NIST, GDPR, PCI-DSS). - Understanding of DevSecOps principles and security-as-code methodologies. Preferred (Good to Have) : Certifications : AWS Security Specialty, CISSP, CISM, CEH, or CISA. - Knowledge of zero-trust architecture and secure coding practices. - Experience with Threat Intelligence Platforms (TIPs) and automated threat remediation. (ref:hirist.tech)

Location: vadodara, IN

Posted Date: 5/13/2025