Cloud Security Engineer

Role & responsibilities

• Design, implement, and manage cloud security controls across AWS, Azure, and GCP.
  
• Establish multi-account security baselines using Control Tower, Organizations, and Landing Zone frameworks.
  
• Implement network security, IAM least-privilege models, SSO/MFA, and manage WAFs (AWS WAF, Cloudflare).
  
• Monitor and improve cloud security posture using CSPM tools; drive remediation via IaC.
  
• Integrate cloud logs with SIEM platforms and support threat detection, incident response, and RCA.
  
• Embed security into CI/CD pipelines through DevSecOps automation and policy enforcement.
  
• Ensure compliance with regulatory frameworks (PCI DSS, ISO 27001, SOC 2, RBI) and support audits.
  
• Own and tune cloud security tooling including CSPM, CIEM, secrets management, and SIEM integrations.

Preferred candidate profile

• Deep understanding of AWS security services (IAM, KMS, Guard Duty, Defender, SCC).

• Hands-on experience with WAF administration managing rulesets, custom signatures, and automation.

• Familiarity with cloud network security VPC design, private link, firewall policies.

• Knowledge of encryption, key management (KMS, HSM), and data protection mechanisms.

• Experience with IaC Security & automation (Terraform, Python scripting).

• Exposure to CSPM / CIEM / CWPP tools.

• Strong understanding of DevSecOps principles and integrating controls into pipelines

• Knowledge of regulatory and compliance frameworks applicable to Fintech.