Cloud Security Engineer (8-15 yrs)

Salary : 30-40LPA

Job Description :

Key Responsibilities :

Cloud Infrastructure Security :

- Design, implement, and manage security solutions for cloud infrastructure.

- Secure cloud environments across AWS and other cloud service providers.

- Develop and enforce cloud security policies, standards, and procedures.

Microservices and Container Security :

- Secure microservices architectures and ensure robust security practices.

- Implement security measures for Kubernetes clusters and containerized applications.

- Manage and secure container orchestration platforms.

Cloud Security Posture Management (CSPM) :

- Continuously monitor and improve cloud security posture.

- Implement CSPM tools to automate security assessments and compliance checks.

- Identify and mitigate vulnerabilities and security risks in the cloud environment.

Infrastructure Security :

- Ensure the security of cloud-based infrastructure, including servers, networks, and storage.

- Implement network security measures such as firewalls, VPNs, and intrusion detection/prevention systems.

- Conduct regular security assessments and audits of the infrastructure.

Application Security :

- Integrate security into the software development lifecycle (SDLC).

- Perform application security assessments and code reviews.

- Implement security best practices for modern applications deployed in the cloud.

Cloud Security Frameworks and Compliance :

- Stay updated with the latest cloud security frameworks and industry best practices.

- Ensure compliance with relevant regulatory requirements and industry standards both from compliance as well as privacy ( PCI DSS, ISMS etc)

Qualification :

- Minimum 8 years of relevant work experience with AWS Cloud

- Strong understanding of microservices, Kubernetes, and container security.

- Experience with Cloud Security Posture Management (CSPM) tools.

- Proficiency in infrastructure security, including network security and encryption.

- Knowledge of modern application security practices and frameworks.

- Familiarity with compliance standards and regulatory requirements.