Senior Cloud Security Engineer

Senior Cloud Security Engineer

About the Role This role centers on the independent ownership of cloud security engineering engagements, from initial design and implementation to ongoing optimization and incident response. You will lead efforts to secure complex cloud-native environments, focusing on robust protection across development and production lifecycles and translating security findings into concrete pipeline and cloud-account changes.

Key Responsibilities

• Design, implement, and manage comprehensive security controls and architectures within Google Cloud Platform (GCP) environments, covering network security, identity and access management (IAM), data protection, and secure configuration, ensuring alignment with security best practices and compliance requirements.
• Architect, deploy, and operate Cloud-Native Application Protection Platforms (CNAPP) like Wiz and Cortex Cloud to gain deep visibility, identify, and remediate security risks across cloud workloads, configurations, and data assets, including misconfigurations and compliance violations.
• Lead the security hardening of containerized applications and orchestration platforms, specifically OpenShift and Kubernetes, by implementing robust network policies, runtime security, image scanning, and fine-grained access controls.
• Conduct in-depth cloud security posture assessments and vulnerability analyses, identifying potential attack vectors and misconfigurations, and delivering concrete, actionable recommendations for remediation and continuous improvement of the security baseline.
• Drive the integration of security into the DevSecOps pipeline for cloud deployments, implementing Infrastructure as Code (IaC) scanning, static application security testing (SAST), dynamic application security testing (DAST), and automated security testing to prevent the introduction of vulnerabilities early in the development lifecycle.
• Oversee and execute incident response procedures for cloud security incidents, including forensic analysis, threat hunting, malware analysis, and the implementation of containment, eradication, and recovery strategies to minimize impact.
• Collaborate closely with development and operations teams to embed security by design, providing expert guidance on secure coding practices, threat modeling, and cloud security architecture patterns for new and existing applications.
• Develop and maintain comprehensive security documentation, standards, and operational playbooks for cloud environments, ensuring consistent application of security policies and facilitating knowledge transfer across teams.

Requirements

• 4-6 years of demonstrated experience in cloud security engineering, with a strong emphasis on independent ownership of deliverables and engagements.
• B.Tech/M.Tech or BCA/MCA in Computer Science, Information Technology, or a related field.
• Proven expertise in securing and managing environments built on OpenShift, Kubernetes, and Google Cloud Platform (GCP).
• Demonstrated proficiency in implementing, configuring, maintaining, and operating Cloud-Native Application Protection Platforms (CNAPP) such as Wiz and Cortex Cloud, including designing solutions with these platforms.
• Solid understanding of cloud networking, identity and access management (IAM), data security, and compliance frameworks within GCP.

Nice-to-Have

• Experience with securing Docker containers and Amazon Web Services (AWS) cloud environments.
• Familiarity with Infrastructure as Code (IaC) tools and practices for secure cloud deployments.
• Experience with security tools for SAST, DAST, or SCA (e.g., Checkmarx, Snyk, Burp Suite, Invicti).
• Understanding of digital forensics and incident response (DFIR) methodologies in cloud environments.

Benefits

• Health insurance for the employee and dependents
• Professional security-certification reimbursement (e.g., CCSP, GCP Professional Cloud Security Engineer)
• Annual learning and skill-development allowance
• Sponsored conference / training attendance
• Flexible work arrangements

Skills

OpenShift, Kubernetes, GCP, Docker, AWS

Qualification

B.Tech/M.Tech or BCA/MCA