cloud security engineer
CRED
Bengaluru, Karnataka, India2–6 yrs5h agovia LinkedIn
About the Role
This role focuses on a diverse information security domain, with a strong emphasis on cloud, infrastructure, and data security.
Key Responsibilities
- Identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in AWS-based systems.
- Own and continuously improve the Cloud Security Posture Management (CSPM) program aligned with standards like NIST 800-53 and ISO 27001.
- Own the cloud workload protection program, including alert investigation and triage.
- Drive the data security charter, including data classification, masking, and securing large-scale data stores.
- Automate infrastructure security and build security tooling to reduce manual effort.
- Conduct security design, infrastructure, and architecture reviews.
- Build, operate, and maintain cloud security platforms to enhance prevention, detection, and response.
- Translate product requirements into threat models and identify security risks.
- Build in-house security frameworks to strengthen security culture across tech teams.
- Enable compliance across teams (PCI DSS, ISO 27001, DPDPA) and promote best practices.
- Drive security awareness and engineering maturity across the organization.
Requirements & Tech Stack
- Solid fundamentals on computer networks, operating systems (Linux), containers, and secure cloud architecture.
- Strong programming skills in Python, Go, or Bash.
- Solid understanding of cloud security with hands-on experience in AWS / GCP / Azure.
- Experience building and automating custom security tools.
- Understanding of microservices, CI/CD pipelines, containers, and securing containerized workloads.
- Strong grasp of core security principles like least privilege, defense-in-depth, and zero trust.
- A data-driven mindset with the ability to influence stakeholders.
- Security projects on GitHub or technical blogs.
- Strong communication skills and the ability to be a go-to security partner for engineers and product teams.
- A proactive approach to staying updated on security threats, breaches, tools, and research.
- Basic understanding of LLMs, MCP, and AI agents and interest in building AI-driven security workflows.
- Familiarity with vulnerability management, patching cycles, and CVSS.