Senior Cloud Security Engineer

The Senior Cloud Security Engineer will be responsible for designing, implementing, and managing security controls across AWS and Azure cloud environments. The role involves developing secure cloud architectures, implementing preventive and detective security measures, integrating security practices into DevOps and CI/CD pipelines, and ensuring compliance with industry security standards. The candidate will work closely with infrastructure, platform, DevOps, and security teams to strengthen cloud security and manage potential threats.

Key Responsibilities:

• Design and implement cloud security architecture across AWS and Azure environments, including identity management, network segmentation, encryption, and workload protection.
• Develop and maintain security controls, policy-as-code guardrails, configuration baselines, and automated remediation processes.
• Conduct security reviews of cloud infrastructure, architecture designs, and newly adopted services.
• Implement cloud security monitoring, threat detection, log aggregation, and alert management in coordination with SOC and incident response teams.
• Support cloud security incident investigations, containment, root cause analysis, and post-incident improvements.
• Configure and manage CSPM/CNAPP tools such as Wiz and Microsoft Defender for Cloud.
• Manage cloud secrets and encryption services, including AWS KMS and Azure Key Vault.
• Integrate security tools into CI/CD pipelines, including IaC scanning, container image scanning, and secrets detection.
• Ensure compliance with security frameworks such as ISO 27001, NIST, SOC 2, and PCI DSS.
• Prepare and maintain secure configuration standards, reference architectures, technical documentation, and operational runbooks.
• Implement cloud security best practices based on AWS and Azure Well-Architected Frameworks.
• Monitor emerging cloud security threats, vulnerabilities, and provider security updates, recommending improvements.
• Collaborate with technology teams and share cloud security expertise across the organization.

Required Skills & Qualifications:

• Minimum 8 years of experience in information security or security engineering roles.
• At least 3 years of hands-on experience in AWS and Azure cloud security.
• Strong understanding of cloud security architecture, IAM policies, cloud roles, and responsibilities.
• Practical experience implementing AWS and Azure Well-Architected Framework security practices.
• Strong fundamentals in Linux, networking, and cryptography.
• Hands-on experience with CSPM/CNAPP and cloud workload protection platforms such as Wiz and Microsoft Defender for Cloud.
• Knowledge of the MITRE ATT&CK framework.
• Experience with CDN, DDoS protection, and WAF solutions such as Cloudflare, AWS WAF, CloudFront, and Azure Application Gateway.
• Strong understanding of cloud networking concepts, including VPC, Transit Gateway, Private Links, and AWS Firewall Manager.
• Experience with AWS security tools such as GuardDuty, Security Hub, and Inspector.
• Proficiency in scripting and programming languages such as Python, Go, or PowerShell.
• Experience securing containers and orchestration platforms such as Docker, Kubernetes, GKE, and EKS.
• Hands-on experience with Infrastructure as Code tools such as Terraform and Bicep.
• Relevant certifications such as AZ-500, Microsoft Azure Architect, AWS Certified Security – Specialty, or AWS Certified Solutions Architect are preferred.
• Strong analytical, problem-solving, communication, and presentation skills.
• Ability to independently manage technical initiatives and collaborate effectively with cross-functional teams.
• Strong leadership, project management, and stakeholder management skills.
• Ability to work in a dynamic environment with a proactive, results-oriented, and service-focused approach.