Onclusive - Senior Cloud Security Engineer - AWS/Azure (4-8 yrs)

About the Role :

We are seeking a seasoned Senior Cloud Security Engineer to safeguard our cloud infrastructure across AWS and Azure.

The ideal candidate will possess strong knowledge of DevSecOps, Terraform, scripting, and cloud security architecture to deliver secure and scalable solutions.

The role will focus on implementing cloud-native security controls and automation, providing strategic security insights, and building secure infrastructure for cloud environments.

Your responsibilities :

Cloud Security Strategy & Architecture :

- Lead the design and implementation of cloud security architecture in both AWS and Azure environments.

- Ensure secure, scalable, and highly available infrastructure in line with best practices.

- Develop and enforce cloud security policies, procedures, and controls that align with organizational standards and compliance.

Cloud Security Operations :

- Secure cloud platforms through robust identity management, encryption, and monitoring mechanisms.

- Implement security measures like IAM, VPC, WAF, security groups, and NSGs for both AWS and Azure.

- Conduct vulnerability assessments, threat detection, and security risk analysis.

DevSecOps & Automation:.

- Integrate security controls into the CI/CD pipelines to ensure automated, continuous security in application deployments.

- Collaborate with DevOps teams to create automated security checks using tools such as Terraform, scripting languages (Python, Bash), and Ansible.

- Monitor and maintain infrastructure-as-code (IaC) security standards using Terraform and scripting for both cloud platforms.

Compliance & Risk Management :

- Ensure cloud platforms are compliant with relevant regulatory standards such as ISO 27001, SOC 2, and GDPR.

- Provide support for audits and assessments to ensure compliance with cloud security best practices.

- Identify and manage cloud security risks, advising on remediation strategies.

Collaboration & Solution Design :

- Work closely with cross-functional teams including DevOps, Infrastructure, and Application Security to align on cloud security strategy and execution.

- Provide security guidance and recommendations during the architecture design phase for new projects or deployments.

- Drive cloud security innovation by keeping up to date with the latest cloud technologies, trends, and threats.

Who you are :

Cloud Platforms :

- Strong expertise in AWS (60%) security services including IAM, KMS, VPC, CloudTrail, GuardDuty, and Security Hub.

- Proficiency in Azure (40%) security technologies like Azure Security Center, Azure Active Directory, and NSGs.

DevSecOps & Automation :

- Experience in integrating security into CI/CD pipelines.

- Proficiency in using Terraform for infrastructure-as-code security implementation.

- Strong scripting skills with languages like Python, Bash, or PowerShell.

Architecture & Solution Design :

- Demonstrated understanding of cloud security architecture principles and best practices.

- Ability to design and implement secure cloud solutions for hybrid environments.

Compliance & Security Frameworks :

- Familiarity with cloud compliance standards like ISO 27001, SOC 2, NIST, and GDPR.

Certifications :

- AWS Certified Security - Specialty, Azure Security Engineer, or other relevant cloud security certifications.

- Certifications in Terraform and DevSecOps tools are a plus.

Preferred Qualifications :

- Hands-on experience with container security (Docker, Kubernetes) and serverless architectures.

- Strong knowledge of encryption standards, identity management, and network security.

- Ability to work in a fast-paced environment and manage multiple projects simultaneously.

What we can offer :

- We are a global fast growing company which offers a variety of opportunities for you to develop your skill set and career.