Lead Cloud Security Engineer

Overview

Lead Cloud Security Engineer focused on securing a cloud-native, DevOps-only environment across cloud risk management, detection, vulnerability management, and CI/CD and container security.

What you'll do

• Own the cloud security posture management (CSPM) program and continuously improve cloud security configurations aligned to global standards.
• Uplift and evolve detection policies on CSPM and draft technical standards for remediation of cloud stack vulnerabilities.
• Own and manage an integrated vulnerability management dashboard to improve visibility into technical debt.
• Evolve and mature the security stack to support a multi-cloud strategy in a high-density containerized environment.
• Engineer and uplift infrastructure-as-code (IaC) and policy-as-a-code (PaaC) for continuous monitoring of risk configuration changes.
• Design and develop frameworks to secure CI/CD pipelines and implement container security on GKE, EKS, or AKS.
• Perform risk assessments of cloud architecture and work with cloud vendors/external researchers to resolve security gaps.

What you'll need

• 7 years of experience in the cloud security domain.
• Hands-on experience with Azure/AWS/GCP security best practices and services.
• Strong knowledge of virtualization, Docker, containers, and container orchestration challenges.
• Hands-on knowledge of Kubernetes components (e.g., PSP, N/W policy, admission controller).
• Strong network knowledge including TCP/IP, UDP, IPSEC, HTTP/HTTPS, routing protocols, TLS, and DDoS detection/prevention.
• Hands-on experience with Terraform.
• Ability to work independently with little direction or supervision.

Details

• Location: Bengaluru.