Cloud Security Engineer

Job Title: Cloud Security Engineer

Location: Remote / India Experience: 5–8 Years Employment Type: Full-Time Notice Period: Immediate Joiners or Up to 15 Days Role Summary

We are seeking a skilled Cloud Security Engineer to strengthen the security of our multi-cloud infrastructure. The ideal candidate will be responsible for cloud security operations, security monitoring, incident response, configuration reviews, automation, and implementing security best practices across cloud platforms, endpoints, email systems, and AI-enabled workloads. This role requires hands-on experience with cloud security technologies, identity management, SIEM, CSPM, automation, and cloud-native security services.

Key Responsibilities Cloud Security Operations

• Monitor, analyze, and respond to security events across AWS, Azure, GCP, or OCI environments.
• Investigate cloud security alerts and perform threat analysis.
• Support continuous monitoring and improvement of the organization's cloud security posture.

Security Findings & Remediation

• Analyze security findings related to cloud infrastructure, endpoints, email security, and monitoring platforms.
• Document risk assessments, severity classifications, business impact, and remediation recommendations.
• Maintain accurate security findings within ticketing systems and reporting platforms.

Alert Investigation & Incident Response

• Triage, investigate, and classify security alerts from cloud security and monitoring tools.
• Maintain detailed investigation records, including analysis performed, mitigation actions, escalations, and final resolution.
• Assist in security incident investigations, root cause analysis, and post-incident reporting.

Cloud Security Posture Management

• Conduct secure configuration assessments across cloud environments.
• Review IAM configurations and evaluate Cloud Security Posture Management (CSPM) findings.
• Recommend improvements to strengthen cloud security controls and compliance.

AI Security

• Secure AI/ML workloads deployed in cloud environments, including training pipelines, inference services, and data storage.
• Monitor AI services and third-party AI APIs for misuse, anomalies, and unauthorized access.
• Collaborate with engineering teams to implement secure AI deployment practices.
• Support governance and policy development for responsible AI adoption.

Security Automation

• Design, develop, and maintain security automation workflows and scripts.
• Develop automation using Python and Infrastructure as Code (IaC) tools such as Terraform.
• Document automation processes to support operational teams.

Reporting & Metrics

• Prepare operational reports covering: + Security alert trends + Remediation progress + Cloud security posture improvements + Tool optimization and tuning
• Present security status updates and findings to internal stakeholders.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
• 5–8 years of experience in Cloud Security, Security Operations, or Cloud Infrastructure Security.
• Hands-on experience securing AWS, Microsoft Azure, Google Cloud Platform (GCP), or Oracle Cloud Infrastructure (OCI).
• Strong understanding of Identity & Access Management (IAM), cloud networking, and cloud-native security services.
• Experience with Cloud Security Posture Management (CSPM) tools and Endpoint Detection & Response (EDR) platforms such as CrowdStrike.
• Experience working with SIEM platforms and incident response processes.
• Knowledge of identity-aware access solutions such as Teleport or similar secure access platforms.
• Proficiency in Python scripting.
• Understanding of AI/ML workload security, API security, and cloud data protection.

Preferred Qualifications

• Industry certifications such as AWS Certified Security – Specialty, Microsoft Azure Security Engineer, CCSP, or CISSP.
• Experience with DevSecOps, SOAR platforms, and security automation.
• Knowledge of compliance frameworks including ISO 27001, SOC 2, and similar standards.
• Familiarity with email security technologies such as SPF, DKIM, and DMARC.