Senior Cloud Security Engineer

About the role

We are looking for a Senior Cloud Security Engineer to lead the design, implementation, and continuous improvement of our security posture across AWS and Azure environments. You will work closely with development, operations, and product teams to embed security early in the software lifecycle and protect critical cloud assets.

Key responsibilities

• Design and enforce secure cloud architecture for core services (EC2/VMs, S3/Blob, RDS, VPC/VNet, load balancers).
• Lead security reviews for new systems and changes, applying Zero Trust principles.
• Build and maintain monitoring, alerting, and SIEM integrations; detect, investigate, and respond to cloud incidents.
• Own IAM strategy across AWS IAM and Azure AD, enforce least‑privilege and role‑based access control.
• Manage secrets, certificates, and key lifecycle using Vault, AWS Secrets Manager, and Azure Key Vault.
• Ensure compliance with CIS Benchmarks, OWASP, SOC 2, ISO 27001; conduct vulnerability assessments and produce audit‑ready reports.
• Integrate SAST, DAST, and dependency scanning into CI/CD pipelines; contribute to IaC security reviews (Terraform).
• Collaborate with Dev, QA, DevOps, and Product teams to shift security left and champion secure coding practices.

Required profile

• 8‑10+ years of experience in cloud security, DevSecOps, or security‑focused infrastructure roles.
• Hands‑on expertise with AWS and Azure security services (GuardDuty, Security Hub, Azure Defender).
• Strong knowledge of IAM, RBAC, secrets management, and access‑control governance.
• Proven experience with SIEM tools, threat detection, and incident response.
• Solid understanding of networking fundamentals, Zero Trust, firewalls, DNS, and SSL/TLS.

Required skills

• AWS
• Azure
• GuardDuty
• Security Hub
• Azure Defender
• IAM
• RBAC
• Vault
• AWS Secrets Manager
• Azure Key Vault
• CIS Benchmarks
• OWASP
• SOC 2
• ISO 27001
• SIEM
• SAST
• DAST
• Docker
• Kubernetes
• Terraform
• CI/CD pipelines
• Git