Cloud Security Engineer

About the role

A Cloud Security Engineer will design, implement, and maintain security controls across cloud environments.

Responsibilities

• Design and implement security controls across AWS, Azure, or GCP environments.
• Manage IAM, roles, policies, permissions, and least-privilege access.
• Secure cloud networks, including VPC/VNet, security groups, firewalls, and private endpoints.
• Monitor cloud environments for security threats, misconfigurations, and suspicious activities.
• Perform vulnerability assessments and support remediation of security issues.
• Implement encryption, key management, secrets management, and data protection controls.
• Configure and monitor cloud security services and SIEM solutions.
• Develop security standards, policies, and best practices for cloud infrastructure.
• Support incident response and investigation of cloud security events.
• Conduct security reviews of cloud architectures and applications.
• Work with DevOps teams to integrate security into CI/CD and DevSecOps pipelines.
• Maintain security documentation and support compliance requirements.

Requirements

• 7+ years of experience in cloud security.
• Strong understanding of Cloud Security concepts.
• Hands-on experience with AWS, Azure, or GCP.
• Good knowledge of IAM, RBAC, MFA, SSO, and least-privilege access.
• Understanding of cloud networking and security controls.
• Experience with SIEM, logging, monitoring, and incident response.
• Knowledge of vulnerability management and security assessment tools.
• Understanding of encryption, certificates, secrets, and key management.
• Familiarity with Docker, Kubernetes, and DevSecOps is a plus.
• Strong knowledge of security principles, threats, and attack techniques.
• Good scripting skills in Python, PowerShell, or Bash are preferred.

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• CCSP
• CISSP