Senior Cloud Security Engineer

We are looking for a Senior Cloud Security Engineer to design, implement, and maintain security solutions across cloud environments. The candidate will be responsible for cloud security architecture, threat detection, vulnerability management, identity and access management, security automation, and compliance.

Key Responsibilities

Design and implement security controls across AWS, Azure, and/or GCP environments.

Monitor cloud infrastructure for security threats, vulnerabilities, and misconfigurations.

Implement IAM, RBAC, MFA, privileged access, and least-privilege security controls.

Secure cloud networks using VPC/VNet, security groups, firewalls, WAF, VPN, and private endpoints.

Implement and manage SIEM, CSPM, CWPP, EDR, and cloud-native security tools.

Conduct cloud security assessments, vulnerability assessments, and risk analysis.

Investigate security incidents and perform threat analysis and root-cause analysis.

Develop and maintain security policies, standards, and cloud security best practices.

Integrate security into CI/CD and DevSecOps pipelines.

Automate security processes using Python, PowerShell, Terraform, or similar tools.

Work with engineering and DevOps teams to remediate security vulnerabilities.

Support compliance requirements such as ISO 27001, SOC 2, PCI-DSS, GDPR, and CIS benchmarks.

Perform security reviews of cloud applications, infrastructure, containers, and APIs.

Create security documentation, reports, dashboards, and remediation plans.

Required Skills

6+ years of experience in Cybersecurity / Cloud Security.

Strong hands-on experience with AWS, Azure, or GCP.

Strong knowledge of IAM, network security, encryption, key management, secrets management, and zero-trust security.

Experience with SIEM and security monitoring tools.

Knowledge of Terraform / Infrastructure as Code and DevSecOps practices.

Strong understanding of Linux and Windows security.

Experience with vulnerability management and security incident response.

Knowledge of Docker/Kubernetes security is preferred.

Strong scripting skills in Python, PowerShell, or Bash.

Good understanding of security frameworks such as NIST, CIS, ISO 27001, and MITRE ATT&CK.

Preferred Certifications

AWS Certified Security – Specialty

Microsoft Certified: Azure Security Engineer Associate

Google Professional Cloud Security Engineer

CISSP / CCSP

GIAC certifications