Senior Cloud Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Continuously ensure that infrastructure implementations align with the security model.

• Develop automated compliance checks and drift detection utilizing AWS Config, Steampipe, or custom tools.

• Assess Terraform pull requests for IAM, SCP, and network security vulnerabilities prior to production deployment.

• Manage the credential lifecycle, encompassing rotation, PAM, JIT access, and session recording.

• Create and refine detection rules within OpenSearch SIEM.

• Develop evidence dashboards that effectively communicate security posture to non-security leadership.

• Analyze security tools through a build-versus-buy framework, documenting trade-offs and making recommendations.

• Take ownership of the infrastructure security posture from access and control modeling to practical verification.

⛳️ Requirements

• Over 5 years of experience in infrastructure or security engineering, with a minimum of 2 years dedicated to AWS security.

• In-depth knowledge of IAM, including policy evaluation logic, permission boundaries, and cross-account access methodologies.

• Proven experience in developing automated security checks that operate in production environments.

• Proficiency in reading and critically evaluating Terraform for security compliance.

• Experience managing PAM tools or credential rotation processes in a production setting.

• Capability to oversee a security domain from start to finish with minimal supervision.

• Background in a smaller organization with fewer than 500 employees, ideally as one of the few or the sole security engineer (highly advantageous).

• Familiarity with multi-account AWS Organizations and SCPs (considered a strong advantage).

• Production experience with SIEM detection rules using OpenSearch, Splunk, Elastic, or other platforms (considered a strong advantage).

• Background in regulated fintech, exchanges, or payments (considered a strong advantage).

• Experience in creating security evidence and reporting for non-security stakeholders (considered a strong advantage).

🏝️ Benefits

• Comprehensive healthcare coverage.

• Flexible working hours and remote work options.

• Professional development opportunities and training programs.

• Competitive salary and performance-based bonuses.

• Collaborative and inclusive work environment.