Cloud Security Engineer- Immediate Joiners

Location: Remote – India

Job Type: Full-Time

Role Overview

We are looking for a Cloud Security Engineer to join our global infrastructure team. This role is primarily responsible for securing our AWS and Azure environments — network architecture, access control, threat monitoring, compliance, and application-level security — with secondary involvement in cloud provisioning and DevOps support to ensure security is embedded across the deployment lifecycle.

Key ResponsibilitiesCloud-Level Security (Primary)

• Design, manage, and secure VPC/VNet architecture — subnets (public/private), route tables, NAT gateways, peering, and network segmentation.
• Configure and audit security groups, NACLs, and firewall rules to enforce least-privilege network access.
• Manage identity and access controls (IAM roles, policies, service principals) across AWS and Azure.
• Monitor cloud environments for security threats, misconfigurations, and anomalous activity using CloudWatch, Azure Monitor, and SIEM/security dashboards.
• Secure cloud-based databases (Snowflake, PostgreSQL, MySQL) — encryption at rest/in transit, access management, audit logging.
• Manage secrets, keys, and certificates (KMS, Key Vault, Secrets Manager).
• Ensure resources follow security baselines, compliance standards (e.g., CIS benchmarks), and governance policies.
• Conduct root cause analysis for security incidents and maintain incident response runbooks.
• Manage backup, recovery, and disaster-resilience posture for critical workloads.
• Maintain security documentation, network diagrams, and operational playbooks.

Application-Level Security (Primary)

• Review application architecture for security gaps (authentication, authorization, data exposure).
• Support secure API design — token management, rate limiting, input validation at the gateway/WAF level.
• Configure and manage WAF rules to protect against common exploits (OWASP Top 10).
• Support vulnerability scanning and patch management for application-layer components.
• Collaborate with dev teams on secure coding practices and dependency/vulnerability checks in CI/CD pipelines.

Cloud Services & DevOps (Secondary)

• Support provisioning of compute, storage, and networking resources in AWS and Azure with security-first configurations.
• Automate secure deployments and configuration using Terraform or CloudFormation, including VPC/subnet as code.
• Support CI/CD workflows with DevOps teams, embedding security checks (SAST/DAST, secrets scanning) into the pipeline.
• Support scaling and capacity planning for production and staging environments.