Cloud Security Engineer

Cloud Security Engineer

The Cloud Security Engineer will be responsible for strengthening cloud and infrastructure security across AWS and GCP. The role involves reducing cloud attack surfaces, improving IAM and infrastructure security, implementing security automation, and ensuring effective security monitoring and detection.

Key Responsibilities

• Strengthen security posture across AWS and GCP and remediate cloud misconfigurations and exposures.
• Manage and prioritize SentinelOne CNAPP findings based on exposure, criticality, and exploitability.
• Implement IAM governance, privileged access reviews, and automated drift detection.
• Develop security guardrails and Policy-as-Code controls for Terraform environments.
• Monitor cloud attack surface for public resources, direct-to-origin exposure, and security configuration drift.
• Ensure security logs from AWS CloudTrail, GCP Audit Logs, and Cloudflare are available and searchable in SentinelOne AI SIEM.
• Support cloud security investigations, root cause analysis, and remediation.
• Prepare security posture reports and compliance evidence related to IAM, logging, encryption, and access governance.

Mandatory Qualifications

• 35+ years of experience in Cloud Security, Infrastructure Security, DevSecOps, or Security Engineering.
• Strong hands-on experience with AWS, especially:
• IAM
• Networking
• Logging
• KMS/Encryption
• Good working knowledge of GCP, especially BigQuery IAM and governance.
• Experience with CNAPP/CSPM tools; SentinelOne CNAPP preferred.
• Strong scripting/automation skills using Python, Go, or Node.js.
• Hands-on experience with Terraform.
• Good understanding of cloud IAM, security misconfigurations, privilege escalation, credential security, and data protection.
• Knowledge of cloud logging and incident response fundamentals.
• Cloudflare WAF/WARP and origin protection knowledge is an added advantage.

Key Skills

AWS | GCP | IAM | BigQuery | SentinelOne CNAPP | SentinelOne AI SIEM | CSPM | Terraform | Python/Go/Node.js | Cloud Security | DevSecOps | Cloudflare | CloudTrail | GCP Audit Logs | Policy-as-Code