Cloud Security Engineer

Job Title: Cloud Security Engineer

Location: Bangalore

Department: Technology

Reports to: Head of Cloud Infra

TookiTaki, the global leader building the Trust Layer for Financial Services, is strengthening its cloud security foundation as we scale our AI-driven AML and fraud-detection platforms across global banks and fintechs. We are looking for a Cloud Security Engineer who blends deep cloud expertise with uncompromising security standards someone who can design, harden, and defend the cloud environments that power our mission. If secure, resilient, and scalable infrastructure is your playground, welcome home.

Roles & Responsibilities

1. Cloud Security Architecture:

\u25cf Ensure systems meet enterprise-grade security, availability, and performance requirements.

\u25cf Drive secure-by-default principles across deployments, services, and automation pipelines.

2. Security Hardening & Compliance:

\u25cf Lead infrastructure hardening across compute, data, storage, network, and IAM.

\u25cf Implement end-to-end compliance guardrails, auditing, and continuous monitoring.

\u25cf Drive patching, vulnerability management, and threat exposure reduction.

3. Threat Detection & Incident Response:

\u25cf Develop runtime threat detection and alerting frameworks (SIEM/SOAR, IDS, CSPM).

\u25cf Conduct compromise assessments and respond to potential breaches with speed and clarity.

\u25cf Act as the primary escalation point for security incidents and lead root cause analysis.

\u25cf Continuously enhance detection logic using emerging threats from the AFC ecosystem.

4. Security Automation & DevSecOps:

\u25cf Integrate security tooling into CI/CD workflows (SAST, SCA, DAST, secrets scanning).

\u25cf Automate policies using IaC (Terraform/CloudFormation) and policy-as-code frameworks.

\u25cf Build automated remediation playbooks to reduce manual intervention. Identity, Access & Secrets Management

\u25cf Implement and govern IAM standards across cloud environments.

\u25cf Build least-privilege, zero-trust access frameworks.

\u25cf Maintain secure secrets management via Vault, KMS, or similar tooling.

5. Disaster Recovery & Business Continuity

\u25cf Lead DR planning and execution with clear RTO/RPO targets.