Cloud Security Engineer

About the role

We are looking for a Cloud Security Engineer to design, implement, and maintain security controls across cloud environments. The ideal candidate will have strong knowledge of cloud security, identity and access management, network security, vulnerability management, and security monitoring.

Responsibilities

• Design and implement security controls across AWS, Azure, or GCP environments.
• Manage IAM, roles, policies, permissions, and least-privilege access.
• Secure cloud networks, including VPC/VNet, security groups, firewalls, and private endpoints.
• Monitor cloud environments for security threats, misconfigurations, and suspicious activities.
• Perform vulnerability assessments and support remediation of security issues.
• Implement encryption, key management, secrets management, and data protection controls.
• Configure and monitor cloud security services and SIEM solutions.
• Develop security standards, policies, and best practices for cloud infrastructure.
• Support incident response and investigation of cloud security events.
• Conduct security reviews of cloud architectures and applications.
• Work with DevOps teams to integrate security into CI/CD and DevSecOps pipelines.
• Maintain security documentation and support compliance requirements.

Requirements

• 7+ years of experience in cloud security.
• Strong understanding of Cloud Security concepts.
• Hands-on experience with AWS, Azure, or GCP.
• Good knowledge of IAM, RBAC, MFA, SSO, and least-privilege access.
• Understanding of cloud networking and security controls.
• Experience with SIEM, logging, monitoring, and incident response.
• Knowledge of vulnerability management and security assessment tools.
• Understanding of encryption, certificates, secrets, and key management.
• Familiarity with Docker, Kubernetes, and DevSecOps is a plus.
• Strong knowledge of security principles, threats, and attack techniques.
• Good scripting skills in Python, PowerShell, or Bash are preferred.

Preferred Qualifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• CCSP
• CISSP