About the company
This position is listed on behalf of a partner company, who manages all applications and next steps. The partner is looking for a Sr Security Engineer based in India.
Responsibilities
- Architect and implement cloud security controls across multi-cloud environments: network segmentation, security groups, NACLs, IAM, least-privilege permissions
- Develop policy-as-code frameworks and IaC security guardrails, integrating automated checks into CI/CD pipelines
- Strengthen container and Kubernetes security through image scanning, admission controls, pod security standards, and runtime threat detection
- Build automated remediation workflows for cloud misconfigurations and security findings
- Lead vulnerability management and serve as escalation point for security incidents
- Develop security detections and response workflows using cloud-native security, EDR, SIEM/SOAR, and vulnerability management tools
- Collaborate with Risk and Compliance teams to translate SOC 2, ISO 27001, PCI-DSS, FedRAMP into technical controls
- Automate compliance evidence collection with GRC systems
- Mentor security engineers through design reviews, threat modeling, code reviews
- Maintain reference architectures, threat models, and operational runbooks
- Participate in on-call rotation
Requirements
- 10+ years of security engineering experience securing production cloud environments at scale
- Experience leading technical projects or mentoring engineers
- Deep expertise in AWS security: IAM, VPC networking, KMS, GuardDuty, Security Hub, AWS Config, Organizations/SCPs
- Knowledge of GCP or Azure security controls is an advantage
- Production experience with Terraform or equivalent IaC tools and policy-as-code frameworks
- Hands-on experience securing containers and Kubernetes in production
- Strong software engineering skills in Python and/or Go, Git-based workflows, CI/CD security integrations
- Experience with SAST, DAST, SCA
- Experience with SIEM/SOAR and vulnerability management tools such as Wiz, Qualys, Tenable
- Knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, NIST 800-53
- Excellent written and verbal communication skills
- Bachelor's degree in Computer Science, Information Systems, or equivalent experience
- Certifications such as CISSP, CCSP, CISA, or AWS/GCP security certifications are an advantage
- Willingness to travel internationally when required
Conditions
- Competitive compensation determined by skills, experience, and location
- Remote work in India
- Medical and dental insurance, retirement/pension plans, life or accident protection
- Two company-wide paid wellness days each year
- One paid day off during birthday month
- Up to 40 hours of paid volunteer leave annually
- Employee Assistance Program with round-the-clock counseling and resources