Cloud Security Engineer

We are seeking an experienced Cloud Security Engineer to shape the security foundation of our modern cloud environments and next-generation applications. In this high-impact role, you will design cutting-edge automated security controls, harden multi-cloud infrastructure, and champion secure development practices across the organization. If you are passionate about cloud security, Dev Sec Ops , and staying ahead of emerging threats, this role puts you right at the center of innovation.

Dev Sec Ops  and Automation

• Pipeline Integration:
  Integrate robust security controls directly into CI/CD platforms such as Git Hub, Git Lab, Jenkins, or Azure Dev Ops.
• Automated Scanning:
  Evaluate and implement pipeline-based security Infrastructure as Code (IaC) scanning. Manage and configure IaC scanning tools to surface true risk.
• Developer Feedback Loops:
  Build and optimize developer feedback loops and automated remediation workflows to ensure software is secure by default. Develop automated scripts using Python, Bash, or Power Shell to streamline security processes.

Identity and Access Management (IAM)

• Cloud Identity Controls:
  Build and maintain IAM security controls across cloud platforms, assessing policies to enforce the principle of least privilege.
• Non-Human Identity Management:
  Standardize management, security controls, and lifecycle expectations with regard to non-human identity.
• Secrets Management:
  Govern the secure use of cloud identities, Application Programming Interfaces (APIs), and secrets management.

Infrastructure Security and Hardening

• Cloud Posture:
  Develop and implement secure infrastructure baselines, vulnerability management processes, and hardening standards across AWS, Azure, or GCP environments.
• Infrastructure as Code (IaC):
  Validate security configurations and leverage IaC tools like Terraform, Cloud Formation, or Bicep to ensure repeatable, auditable, and secure infrastructure provisioning.
• Network Security:
  Tackle high-impact infrastructure projects such as multi‑cloud network isolation, secure multi‑tenant use, and continuous remediation of discovered misconfigurations.

Workload Security

• Cloud‑Native Architectures:
  Guide engineering teams on secure architecture design for cloud apps, microservices, serverless services, and PaaS workloads.
• Container Security:
  Advance container and Kubernetes security by implementing runtime controls, supply‑chain security, and configuration assessments.
• AI & Emerging Tech:
  Secure in‑house and public AI/ML systems against cyber threats, adversarial attacks, and unauthorized access, ensuring models and data pipelines are protected throughout the solution lifecycle.

Data Security and Privacy

• Data Protection:
  Ensure that sensitive cloud and AI data is properly encrypted, anonymized, and securely stored.
• Encryption Standards:
  Assess and implement strong encryption configurations, checkpoint encryption, and tokenization to protect data at rest and in transit.
• Compliance Alignment:
  Develop and enforce policies to align data security and privacy measures with industry regulations, ethical standards, and organizational governance requirements.

Monitoring, Detection, and Response

• Telemetry & Visibility:
  Partner with Security Operations to improve cloud application telemetry, logging, and observability. Help expand monitoring capabilities by onboarding log sources and building detection rules for cloud-based threats.
• Threat Detection:
  Monitor and analyze security events using SIEM, Cloud Security Posture Management (CSPM), and Cloud Workload Protection Platforms (CWPP).
• Incident Response:
  Support the triage, investigation, and forensic analysis of cloud-based application or pipeline security incidents, working collaboratively to contain and mitigate threats.

• Experience:
  
  5+ years of hands‑on experience in cloud security, application security, Dev Sec Ops , or related engineering roles.
• Cloud Expertise:
  Deep hands‑on experience with Azure and/or AWS security services, including the design and maintenance of multi‑cloud application controls.
• Technical
  
  Skills:
  
  Proficiency in scripting (Python, Bash, Power Shell) to automate security tasks. Strong…