Senior Cloud Security Engineer

Overview

Dedicated security engineer for a cryptocurrency derivatives exchange's AWS infrastructure. You will verify that infrastructure matches the security model, continuously, and prove the security posture to leadership.

What you'll do

• Verify that infrastructure implementations match the security model, continuously rather than quarterly.
• Build automated compliance checks and drift detection (AWS Config, Steampipe, custom tooling, or whatever works).
• Review Terraform PRs for IAM, SCP, and network security gaps before they reach production.
• Own credential lifecycle: rotation, PAM, JIT access, session recording.
• Write and tune detection rules in OpenSearch SIEM.
• Build evidence dashboards that prove security posture to non-security leadership.
• Evaluate security tooling (build vs buy) and own the recommendation with documented tradeoffs.

What you'll need

• 5+ years in infrastructure or security engineering.
• At least 2 years focused on AWS security, including IAM beyond basic roles: policy evaluation logic, permission boundaries, cross-account access patterns.
• Have built automated security checks that run in production (any tooling).
• Can read and critically review Terraform for security posture.
• Have operated PAM tooling or credential rotation in production (any tool).
• Comfortable owning a security domain end-to-end without constant direction.

Nice to have

• Worked at an organization of a similar kind (multi-account AWS Organizations / SCP experience).
• Wrote SIEM detection rules in production (any platform: OpenSearch, Splunk, Elastic, etc.).
• Regulated fintech, exchange, or payments background.
• Built security evidence or reporting that non-security people actually used.

Details

• Location: India.