Senior Information Security Engineer

Overview

Senior Security Engineer – Cloud Security responsible for implementing, operating, and continuously improving the organization's Cloud-Native Application Protection Platform (CNAPP) and associated cloud security capabilities.

What you'll do

• Implement, configure, and administer the organization's enterprise CNAPP platform across cloud environments.
• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform.
• Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools.
• Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations.
• Monitor platform health, coverage, data ingestion, scanning status, and integration failures.
• Evaluate and implement new CNAPP capabilities as the organization's cloud environment and security requirements evolve.
• Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services.
• Work with cloud engineering teams to establish secure cloud configuration baselines.
• Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services.
• Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context rather than severity alone.
• Work with infrastructure and application teams to drive remediation.
• Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and combinations of risks that create exploitable attack paths.

What you'll need

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience.
• 7+ years of Information Security experience, with significant hands-on experience in cloud security.
• Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP.
• Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies.
• Strong understanding of cloud security architecture, cloud IAM and least privilege, cloud networking and exposure, vulnerability management, containers and Kubernetes security, infrastructure-as-code security, cloud logging and monitoring, and security configuration management.
• Experience analyzing and remediating cloud security findings.
• Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Ability to troubleshoot complex security integrations and cloud configurations.
• Strong analytical, problem-solving, documentation, and communication skills.
• Familiarity with MITRE ATT&CK, particularly cloud-related attack techniques.

Nice to have

• Relevant certifications such as CCSP, CCSK, AWS Security Specialty, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, CISSP, or equivalent.

Details

• Location: Bangalore, Karnataka, India.