Cloud Engineer

Key Responsibilities:

Design, implement, and maintain Cloud Security Posture Management (CSPM) systems covering cloud and cloud-native configuration risks

Build and operate automated detection and remediation pipelines for configuration risks

Develop and maintain a multi-layer security control framework to prevent high-risk operations (e.g. over-privileged access keys, weak credentials, misconfigured storage)

Establish security visualization frameworks and dashboards for real-time visibility into the organization's security posture

Design and implement cloud and container security frameworks, including image supply chain verification and admission-based deployment controls

Establish Kubernetes policy governance and container security best practices

Conduct security audits on AWS and GCP native configurations

Deploy and manage core security systems such as WAF, HIDS, NIDS, DDoS protection, honeypots, bastion hosts, and CI/CD security checkpoints

Lead security testing across the SDLC, including code reviews and vulnerability assessments

Perform penetration testing for cloud-based systems

Define security baselines and remediation plans

Drive identification and remediation of critical and high-risk vulnerabilities

Contribute to AI-based automated security detection and response workflows

Develop internal security tools to improve monitoring, threat detection, and incident response

Standardize incident response processes and playbooks

Lead handling of high-priority security incidents and drills

Conduct intrusion analysis, vulnerability response, and alert correlation

Requirements:

Minimum 5 years of experience in cloud security, security engineering, or related field

Proven experience in enterprise security architecture and cloud-native security operations

Hands-on experience with AWS and/or GCP security frameworks

Experience with Kubernetes security (e.g. admission controllers, policy governance, container hardening)

Demonstrated experience in penetration testing and vulnerability assessments for cloud-based systems

EA Number: 11C4879