We are seeking an experienced Cloud Security Engineer to lead the definition, implementation, and governance of application and cloud security standards across the organization. This role requires a hands-on security engineer with deep expertise in cloud security, application security, and development practices. You will partner with product and engineering teams to build and operate secure cloud solutions, define enterprise-wide security standards, and ensure compliance with global security frameworks.
Required Skills
Technical Skills & Expertise
- Strong command of Infrastructure-as-Code tools: Terraform, CloudFormation, Pulumi.
- Hands-on experience securing cloud-based applications in Microsoft Azure or AWS.
- Proficient in at least one programming language: Python, C#, Java, C++, Go, JavaScript, etc.
- Experience with cloud automation and serverless architectures (Azure Functions, Service Bus, API Gateway, etc.).
- Working knowledge of hybrid cloud networking.
- Deep understanding of application security, encryption/key management, authentication, and CI/CD pipeline security.
- Experience with monitoring, incident response, and cloud operations.
Desired Skills
- Experience securing enterprise-scale cloud offerings.
- Knowledge of cloud security best practices and cloud-native security controls.
- Familiarity with information security governance and compliance requirements.
- Relevant cloud and security certifications are a plus (e.g., CISSP, CCSP, AWS/Azure Security certifications).
- Strong analytical, troubleshooting, and problem-solving skills.
- Proactive in staying current on cloud technologies, emerging security threats, vulnerabilities, and controls.
Qualifications & Experience
- 6+ years of hands-on experience in cloud security or related roles.
- Master’s degree in a relevant field is an added advantage.
- Proven track record of implementing security controls at scale in cloud environments.
Key Responsibilities
- Work closely with product and engineering teams to identify, map, and mitigate security risks, including assessing attack surfaces and co-designing security mitigations.
- Define, develop, and maintain enterprise-wide application and cloud security standards, frameworks, and best practices.
- Ensure alignment with global and regional security standards and regulations, including:
- ISO 27001 / 27002
- NIST, OWASP, CIS Benchmarks
- GDPR and regional data protection regulations
- Document all security-related implementations, including technical documentation and runbooks.
- Automate security controls, monitoring, and reporting to improve operational efficiency and metrics.
- Continuously assess and enhance cloud privilege models to ensure least-privilege access to data and services.
- Monitor emerging cloud security threats and vulnerabilities, and implement proactive mitigations.
Diversity and Inclusion
We’re committed to building a workplace where everyone feels respected, supported, and empowered. We welcome applicants from all backgrounds, identities, and experiences. Your unique perspective matters here.
Ready to Apply?
Join us in building secure, scalable, and reliable cloud solutions. Apply now!
