Key Roles & Responsibilities :

- Architecture & Design : Design, build, and deploy secure, scalable, and resilient cloud infrastructures across public cloud platforms (AWS, OCI).

- Identity & Access Management (IAM) : Design and manage robust cloud IAM policies, ensuring the principle of least privilege is strictly enforced across all environments.

- DevSecOps Integration : Integrate security tools and automated vulnerability scanning (SAST/DAST, SCA) directly into CI/CD pipelines. Implement Infrastructure as Code (IaC) security scanning (CSPM).

- Security Automation & Incident Response : Develop automated scripts and workflows to detect, alert, and remediate cloud security misconfigurations and threats in real-time. Assist the SOC team with cloud-specific incident investigation and forensics.

- Vulnerability & Threat Management : Conduct regular cloud security assessments, threat modeling, and configuration audits. Monitor and manage security alerts from CNAPP, CSPM, and CWPP platforms.

- Compliance & Governance : Ensure cloud infrastructure meets regulatory standards (SOC 2, ISO 27001, PCI-DSS, DPDP). Implement and monitor adherence to CIS Benchmarks.

- Collaboration & Mentorship : Partner with engineering teams to provide security guidance during the software development lifecycle (SDLC). Conduct security awareness training regarding cloud best practices for internal teams.

Technical Requirements :

- Experience : 3 - 5+ years of dedicated experience in cloud security engineering, cybersecurity, or systems/DevOps engineering with a heavy focus on cloud security.

- Cloud Platform Expertise : Hands-on experience securing at least one major cloud provider (AWS, Azure, GCP), with a strong preference for multi-cloud experience.

- Infrastructure as Code (IaC) : Proficiency with IaC tools like Terraform, CloudFormation, or Ansible, and experience securing them.

- Container & Orchestration Security : Strong understanding of securing containerized workloads (Docker) and orchestration platforms (Kubernetes/EKS/AKS/GKE).

- Programming/Scripting : Proficiency in at least one scripting or programming language (e.g., Python, Bash, Go, PowerShell) for security automation.

- Security Tools : Experience with cloud security tools such as AWS Security Hub, Azure Defender, OCI cloud guard, Aqua Security, or open-source equivalents.

- Networking : Deep understanding of cloud networking concepts (VPCs, VNet peering, Firewalls, WAF, Load Balancers, VPNs, and Zero Trust architecture).

Education :

- Bachelor's degree - BTech or equivalent.