Principal Product Security Engineer, Cloud Security
New
J
JobgetherCloud security
Based in IndiaFull-TimePrincipal
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years of experience in security engineering
- Required Skills
- AWSDockerPythonKubernetesMicrosoft Azure
Requirements
- 10+ years of security engineering experience, with deep specialization in cloud security, secure architecture, and platform security.
- Experience as a principal engineer or technical authority leading security architecture, risk mitigation, and threat modeling initiatives.
- Hands-on experience with multi-cloud environments, particularly AWS, GCP, and/or Azure.
- Experience with Docker, Kubernetes, and service mesh technologies.
- Experience designing and reviewing security architectures for regulated, private, isolated, government, or FedRAMP-compliant cloud offerings.
- Experience securing microservices architectures and large-scale distributed systems.
- Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript.
- Experience developing scalable security automation and internal tooling.
- Knowledge of Infrastructure as Code, policy-as-code, centralized secrets management, automated security controls, and CI/CD security integrations.
- Understanding of Zero Trust, tenant data isolation, encryption, cryptographic systems, and multi-tenant SaaS environments.
- Experience with cloud detection engineering, distributed telemetry and logging, IAM graph analysis, least-privilege automation, and enterprise alert optimization.
- Bachelor's or Master's degree in Computer Science, Information Security, or a related technical discipline, or equivalent practical experience.
Responsibilities
- Define cloud security architecture across AWS, GCP, and Azure, including secure-by-default standards, architectural patterns, and security guardrails.
- Lead threat modeling and security assessments across complex systems, distributed microservices, and regulated cloud environments.
- Design and implement automated security controls, detection mechanisms, and self-healing guardrails in CI/CD pipelines and Infrastructure as Code.
- Set technical strategy for CSPM, continuous compliance, security baselines, and risk monitoring.
- Develop reusable security frameworks, engineering guidelines, and operational standards for products and platforms.
- Provide technical leadership and mentorship to security and software engineers.
- Advise during high-severity security incidents, support root-cause investigations, and define architectural remediation strategies.
- Collaborate with executive stakeholders, principal architects, and engineering leaders to turn security challenges into strategic priorities.
- Lead security initiatives for architectural transformations, including monolith-to-microservices migrations and cloud-native platform evolution.
- Embed security practices throughout the software development lifecycle while supporting developer experience.
View Full Description & ApplyYou'll be redirected to the employer's site
