Job Summary:
We are looking for a Senior Cloud Security Engineer with strong hands-on experience in AWS and Azure security. The candidate should be capable of designing and implementing cloud security architecture, managing security controls, monitoring cloud environments, and integrating security practices into DevOps and CI/CD pipelines.
The person should have strong expertise in cloud security tools, IAM, networking, CSPM, container security, and Infrastructure as Code (IaC).
Job Description:
- Design and implement cloud security architecture across AWS and Azure environments.
- Manage cloud security controls, including IAM, network segmentation, encryption and workload protection.
- Implement preventive and detective security controls, policy-as-code guardrails and automated remediation.
- Conduct security reviews of cloud infrastructure, architecture designs and new cloud services.
- Configure and manage CSPM/CNAPP tools such as Wiz and Microsoft Defender for Cloud.
- Implement cloud security monitoring, threat detection, log aggregation and alert management.
- Support cloud security incident investigations, containment, root cause analysis and remediation.
- Integrate security tools into CI/CD pipelines, including IaC scanning, container scanning and secrets detection.
- Secure cloud workloads, containers and Kubernetes environments.
- Implement cloud security best practices aligned with AWS and Azure Well-Architected Frameworks.
- Ensure compliance with ISO 27001, NIST, SOC 2 and PCI DSS standards.
- Develop secure configuration standards, reference architectures and security runbooks.
- Work closely with Cloud, Infrastructure, Platform, DevOps and SOC teams to improve the overall security posture.
Profile Description:
We are looking for a technically strong Cloud Security Engineer who has:
- 8+ years of overall experience in Information Security or Security Engineering.
- At least 3+ years of hands-on experience in AWS and Azure Cloud Security.
- Strong experience in designing and implementing cloud security architecture.
- Practical experience with AWS and Azure security services and configurations.
- Strong knowledge of IAM, cloud networking, encryption and security fundamentals.
- Hands-on experience with CSPM/CNAPP tools such as Wiz or Microsoft Defender for Cloud.
- Experience with cloud threat detection, monitoring and incident response.
- Good exposure to DevSecOps, CI/CD security and Infrastructure as Code scanning.
- Experience securing Docker, Kubernetes and cloud-native applications.
- Strong scripting skills in Python, Go or PowerShell.
- Experience with Terraform or Bicep.
- Knowledge of MITRE ATT&CK and security compliance frameworks.
- Ability to independently lead technical initiatives and work with cross-functional teams.
