Senior Security Engineer
New
J
JobgetherCloud security
The position is listed as remote in India.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of security engineering experience
- Required Skills
- PythonGoTerraform
Requirements
- Bring 10+ years of security engineering experience, including substantial hands-on responsibility for securing production cloud environments at scale.
- Demonstrate experience leading technical projects, influencing security architecture, or mentoring engineers.
- Have deep practical AWS security expertise, including IAM, VPC networking, KMS, GuardDuty, Security Hub, AWS Config, and Organizations/Service Control Policies.
- Have production experience with Terraform or equivalent IaC tools, policy-as-code frameworks, and automated security guardrails.
- Bring hands-on experience securing containers and Kubernetes workloads in production.
- Have strong software engineering skills in Python and/or Go, familiarity with Git-based workflows, and experience maintaining CI/CD security integrations.
- Have experience integrating SAST, DAST, and SCA into development pipelines.
- Have practical experience with SIEM/SOAR platforms and vulnerability management tools such as Wiz, Qualys, or Tenable.
- Know compliance frameworks including SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53, and be able to translate controls into engineering solutions.
- Hold a bachelor's degree in Computer Science, Information Systems, or a related discipline, or have equivalent practical experience.
- Be willing to undertake international travel when required.
- GCP or Azure security knowledge and certifications such as CISSP, CCSP, CISA, or AWS/GCP security certifications are advantageous.
Responsibilities
- Architect and implement cloud security controls across multi-cloud environments, including network segmentation, IAM, least-privilege permissions, and organizational security policies.
- Develop policy-as-code frameworks and IaC security guardrails, integrating automated checks into CI/CD pipelines.
- Strengthen container and Kubernetes security through image scanning, admission controls, pod security standards, and runtime threat detection.
- Build automated remediation workflows for cloud misconfigurations, configuration drift, and recurring security findings.
- Lead vulnerability management and coordinate security incident investigations, forensic analysis, containment, root cause analysis, and remediation.
- Develop security detections and response workflows using cloud-native security capabilities, EDR, SIEM/SOAR platforms, and vulnerability management tools.
- Translate compliance frameworks into technical controls and automate compliance evidence collection through cloud telemetry, security data, and GRC systems.
- Mentor security engineers through design reviews, threat modeling, code reviews, and architecture assessments.
- Maintain reference architectures, threat models, technical documentation, and operational runbooks.
- Participate in and improve the security team's on-call rotation.
View Full Description & ApplyYou'll be redirected to the employer's site
