Senior Cloud Security Engineer

### About the Role This role involves taking independent ownership of cloud security engagements and deliverables, focusing on securing complex cloud-native environments. You will be responsible for designing, implementing, and operating robust security controls across client cloud infrastructures, primarily within GCP and OpenShift/Kubernetes deployments, ensuring comprehensive protection and compliance. ### Key Responsibilities * Architect, implement, and maintain robust cloud security solutions within GCP environments, with a strong emphasis on securing OpenShift and Kubernetes clusters. * Utilize Wiz and Cortex Cloud platforms to implement, configure, and operate cloud security posture management (CSPM) and cloud workload protection (CWPP) capabilities, ensuring continuous monitoring and remediation. * Conduct in-depth cloud security posture assessments across GCP accounts, identifying and addressing configuration weaknesses, compliance deviations, and potential attack vectors. * Integrate security into the software development lifecycle (SDLC) by implementing Infrastructure as Code (IaC) scanning, container image scanning, and vulnerability management processes for applications deployed on Kubernetes. * Lead incident response activities for cloud-native security events, including evidence acquisition from cloud logs, initial malware analysis, and timeline reconstruction to determine root cause and scope. * Develop and implement security policies and controls for container orchestration platforms like OpenShift, ensuring runtime integrity, network segmentation, and access control enforcement. * Provide technical leadership and hands-on expertise for client projects, guiding the implementation of secure cloud architectures and automation of security operations. * Collaborate with development and operations teams to embed security best practices early in the design and deployment phases of cloud applications. ### Requirements * 4-6 years of experience in cloud security engineering or a related field. * B.Tech/M.Tech or BCA/MCA in Computer Science, Information Technology, or a related discipline. * Demonstrated expertise in securing Google Cloud Platform (GCP) environments. * Proven experience with OpenShift and Kubernetes security, including cluster hardening, network policies, and workload protection. * Proficiency in managing, operating, and architecting solutions using Wiz and Cortex Cloud for cloud security posture management and threat detection. * Strong understanding of cloud-native security principles, including identity and access management (IAM), network security, data protection, and compliance frameworks within cloud ecosystems. * Experience with Infrastructure as Code (IaC) security practices and tools. * Ability to independently manage security engagements and deliver actionable recommendations. ### Nice-to-Have * Hands-on experience with securing AWS environments and Docker containers. * Familiarity with vulnerability management platforms such as Tenable (Nessus) for cloud and containerized assets. * Practical experience integrating secure code analysis tools like Checkmarx or Snyk into CI/CD pipelines. * Relevant cloud security certifications such as CCSP, CCSK, or a GCP Professional Cloud Security Engineer certification. ### Benefits * Health insurance for the employee and dependents * Professional security-certification reimbursement (e.g., CCSP, CCSK, GCP Professional Cloud Security Engineer) * Annual learning and skill-development allowance * Sponsored conference / training attendance * Flexible work arrangements ### Skills OpenShift, Kubernetes, GCP, Docker, AWS ### Qualification B.Tech/M.Tech or BCA/MCA