Job Overview :

We are looking for a hands-on Cloud Security Operations Engineer to strengthen security across AWS, Azure, and GCP environments. The role will focus on cloud security operations, data protection, incident response, CSPM/CNAPP, compliance, and secure cloud architecture.

Key Responsibilities :

- Design and implement secure architectures and security controls across multi-cloud environments.

- Manage CSPM/CNAPP platforms to identify, prioritize, and remediate cloud security risks and misconfigurations.

- Implement and monitor IAM, MFA, SSO, PAM, encryption, KMS/HSM, DLP, WAF, and network security controls.

- Monitor cloud security alerts, investigate incidents, perform root-cause analysis, and coordinate remediation.

- Manage cloud DLP alerts, policies, tuning, data classification, and compliance reporting.

- Conduct security assessments and audits aligned with CIS Benchmarks, CSA CCM, NIST, and organizational standards.

- Implement secure network patterns including private endpoints, PrivateLink/Private Service Connect, bastion access, and network segmentation.

- Harden cloud workloads, VMs, containers, and operating systems using CIS and vendor-recommended standards.

- Develop security automation using Python, PowerShell, or Bash and integrate security into IaC/DevSecOps workflows.

- Collaborate with Cloud, Infrastructure, Application, and GRC teams to drive remediation and improve overall cloud security posture.

Required Skills :

- Strong experience with CIS Benchmarks, CSA Cloud Controls Matrix (CCM), and CSPM/CNAPP.

- Strong hands-on experience with at least one major cloud platform : AWS, Azure, or GCP.

- Experience with tools such as Wiz, Prisma Cloud, CloudGuard Dome9, Microsoft Defender for Cloud, or equivalent.

- Good understanding of cloud networking, IAM, SIEM, DLP, Docker/Kubernetes, and Zero Trust principles.

- Strong scripting skills in Python, PowerShell, or Unix Shell.

- Experience with cloud security compliance, audits, and incident management.

- Preferred : Experience with Terraform/CloudFormation/ARM Templates and cloud-native security services such as AWS Security Hub, Microsoft Defender for Cloud, or Google Security Command Center.