Job Description

Key Responsibilities

Design and implement

cloud security architectures

across AWS, Azure, or Google Cloud. Develop and enforce

security best practices

, identity and access management (IAM) policies, and network security controls. Conduct

risk assessments, threat modeling

, and implement mitigation strategies for cloud workloads. Configure and monitor

cloud security tooling

such as CSPM, CWPP, SIEM, and vulnerability scanners. Work closely with DevOps teams to integrate security into CI/CD pipelines (

DevSecOps

). Manage

data protection mechanisms

, including encryption, KMS, key rotation, and secure storage. Perform

incident response

, log analysis, and forensic investigations for cloud-related events. Ensure compliance with industry standards such as

ISO 27001, SOC2, NIST, CIS, GDPR

, etc. Develop automation scripts for

security monitoring, alerting, and remediation

using Python, PowerShell, or similar languages. Prepare documentation, security reports, and contribute to policy development.

Educational Qualifications

Bachelor's degree in

Computer Science, Information Security, Engineering

, or a related field. Master's degree is an advantage but not mandatory. Hands-on experience with at least one major cloud platform:

AWS, Azure, GCP

. Strong understanding of

IAM, VPC/Network Security, API security, monitoring, and compliance frameworks

. Expertise in cloud security tools:

AWS Security Hub, GuardDuty, Azure Sentinel, Prisma Cloud, CrowdStrike, Splunk

, etc. Experience with

firewalls, WAF, VPNs, Zero Trust models

, and network architecture. Familiarity with

DevSecOps practices

, CI/CD pipelines, and IaC tools (Terraform, CloudFormation). Knowledge of

container security

(Docker, Kubernetes, EKS, AKS, GKE security). Proficiency in scripting languages:

Python, Bash, PowerShell

. Understanding of

encryption, PKI, secrets management

, and endpoint security controls
Job Type: Full-time

Pay: $70,000.00-$120,000.00 per year