Cloud Security Engineer
Design and harden AWS cloud security for an AI-driven AML and fraud-detection platform, implementing PCI-DSS controls, threat detection, and DevSecOps automation.
- Compensation
- Not disclosed
- Location
- Bengaluru, Karnataka, India
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Full description
##
Location: Bengaluru,Karnataka,India
Job Title: Cloud Security Engineer Location: Bangalore Department: Technology Reports to: Head of Cloud Infra
TookiTaki, the global leader building the Trust Layer for Financial Services, is strengthening its cloud security foundation as we scale our AI-driven AML and fraud-detection platforms across global banks and fintechs. We are looking for a Cloud Security Engineer who blends deep cloud expertise with uncompromising security standards — someone who can design, harden, and defend the cloud environments that power our mission. If secure, resilient, and scalable infrastructure is your playground, welcome home.
Roles & Responsibilities1. Cloud Security Architecture:
**● Design and implement secure cloud architectures across AWS
● Ensure systems meet enterprise-grade security, availability, and performance requirements.
● Drive secure-by-default principles across deployments, services, and automation pipelines.
2. Security Hardening & Compliance:
● Own and maintain PCI-DSS–aligned cloud security controls.
● Lead infrastructure hardening across compute, data, storage, network, and IAM.
● Implement end-to-end compliance guardrails, auditing, and continuous monitoring.
● Drive patching, vulnerability management, and threat exposure reduction.
3. Threat Detection & Incident Response:
● Develop runtime threat detection and alerting frameworks (SIEM/SOAR, IDS, CSPM).
● Conduct compromise assessments and respond to potential breaches with speed and clarity.
● Act as the primary escalation point for security incidents and lead root cause analysis.
● Continuously enhance detection logic using emerging threats from the AFC ecosystem.
4. Security Automation & DevSecOps:
● Integrate security tooling into CI/CD workflows (SAST, SCA, DAST, secrets scanning).
● Automate policies using IaC (Terraform/CloudFormation) and policy-as-code frameworks.
● Build automated remediation playbooks to reduce manual intervention. Identity, Access & Secrets Management
● Implement and govern IAM standards across cloud environments.
● Build least-privilege, zero-trust access frameworks.
● Maintain secure secrets management via Vault, KMS, or similar tooling.
5. Disaster Recovery & Business Continuity
● Lead DR planning and execution with clear RTO/RPO targets.