{bc}
Apply
company_site

Senior Security Cloud Engineer

IC Markets Global
Hyderabad, IND
Full-time
Senior · 10+ years experience
Onsite
Discovered 2 days ago
aws

Full Job Posting

Key Responsibilities

  • Cloud Security, Architecture and Engineering
  • Lead security architecture reviews for new systems, significant changes and existing AWS, on-premises and
  • hybrid environments.
  • Design, implement and validate AWS security controls across identity and access management, networking,
  • compute, storage, encryption, secrets management and logging.
  • Strengthen security across AWS accounts through organisational policies, service control policies, secure
  • account structures and centralised security monitoring.
  • Identify and remediate excessive permissions, exposed resources, insecure configurations and attack paths
  • across cloud environments.
  • Assess and improve container, Kubernetes and Amazon EKS security, including workload identities, network
  • access and runtime controls.
  • Review network architectures and security controls, including segmentation, routing, firewalls, VPNs and
  • connectivity between cloud and on-premises environments.
  • Optimise AWS WAF rules and policies using traffic analysis and security findings to strengthen protection and
  • minimise false positives.
  • Work closely with Cloud and Infrastructure and Platform Engineering teams to embed security into infrastructure
  • design, deployment and operation.
  • Define reusable security architectures, hardening standards and secure configuration patterns, and verify their
  • effectiveness through technical testing.
  • Key Responsibilities continued
  • Automation, AI and Technical Leadership
  • Apply an automation mindset to security engineering, replacing repetitive manual activities with reliable, reusable
  • workflows.
  • Use Terraform and Ansible to embed security controls into infrastructure provisioning, configuration
  • management and remediation.
  • Develop scripts and API integrations to automate security checks, vulnerability validation, evidence collection
  • and reporting.
  • Integrate infrastructure-as-code scanning, policy validation and security checks into CI/CD pipelines.
  • Design automation with appropriate testing, exception handling, approval controls and rollback capabilities.
  • Apply AI-assisted tools to security analysis, investigation and engineering tasks, independently validating outputs
  • and protecting sensitive information.
  • Assess security risks introduced by AI services and integrations, including data exposure, prompt injection and
  • excessive permissions.
  • Mentor engineers, guide technical decisions and communicate security priorities clearly to technology teams and
  • management.
  • Vulnerability Management and Risk Analysis
  • Drive vulnerability management across cloud platforms and supporting infrastructure, from discovery and
  • validation through remediation and verified closure.
  • Prioritise findings using exploitability, exposure, asset criticality, attack paths and potential business impact.
  • Work with technology owners to agree remediation actions and timelines, escalating overdue or material risks.
  • Conduct technical risk assessments and explain treatment options, compensating controls and residual risk.
  • Analyse recurring findings and address their underlying causes through improvements to architecture,
  • infrastructure code and configuration standards.
  • SOC Engineering and Incident Investigation
  • Improve security telemetry, SIEM detections and investigation workflows across AWS, identity and infrastructure
  • environments.
  • Investigate and respond to SIEM and Cloud Native Application Protection Platform (CNAPP) alerts, coordinate
  • remediation, and fine-tune detection rules, policies and thresholds to improve alert quality and reduce false
  • positives.
  • Ensure relevant cloud activity and security events are captured, centralised and available for investigation.
  • Develop and tune detections for suspicious access, privilege escalation, configuration changes and other
  • relevant attack techniques.
  • Automate alert enrichment, investigation and response activities with appropriate approval controls.
  • Provide senior technical expertise during complex cloud and infrastructure investigations, supporting
  • containment and recovery.
  • Validate detection coverage through controlled testing and translate incident findings into stronger preventive
  • and detective controls.
  • Security Assessments and Penetration Testing
  • Conduct end-to-end security assessments and penetration testing across AWS environments, infrastructure,
  • web applications and APIs, from scoping through reporting and retesting.
  • Identify exploitable misconfigurations, authentication and authorisation weaknesses, privilege escalation
  • opportunities and attack paths across applications and cloud services.
  • Combine architecture and configuration reviews with hands-on testing to assess security controls and business
  • impact.
  • Document findings with clear evidence and practical remediation guidance, working with Cloud, Development
  • and Application Security teams to verify fixes.
  • Review external assessment findings and coordinate remediation and retesting with relevant technology teams.
  • Required Experience and Technical Skills
  • At least 10 years of relevant professional experience across cybersecurity, cloud security and infrastructure
  • security, with substantial hands-on engineering responsibility.
  • Strong hands-on AWS security and architecture expertise is mandatory, including IAM, AWS Organizations,
  • service control policies, VPC security, EC2, S3, KMS, secrets management, CloudTrail, GuardDuty, Security
  • Hub and AWS WAF, including rule optimisation and tuning.
  • Demonstrated experience designing and implementing security controls across multi-account AWS
  • Strong understanding of networking and network security is mandatory, including TCP/IP, DNS, routing,
  • switching, subnetting, firewalls, VPNs, network segmentation and traffic analysis.
  • CCNA certification is required as a minimum, or a higher-level relevant networking certification.
  • Hands-on experience with Terraform and Ansible, including developing and reviewing infrastructure definitions,
  • configuration playbooks and automated remediation.
  • Strong scripting skills in Python, PowerShell or Bash, with practical experience integrating tools through APIs.
  • An automation mindset, demonstrated through projects that improve security consistency, scalability and
  • operational efficiency.
  • Practical experience securing containers, Kubernetes and Amazon EKS, including workload permissions and
  • runtime controls.
  • Experience embedding security checks into infrastructure-as-code and CI/CD workflows.
  • Strong knowledge of Windows, Linux, Active Directory and privileged access.
  • Experience with vulnerability management, technical risk analysis and verification of remediation.
  • Practical experience investigating and responding to SIEM and CNAPP alerts, including tuning detection rules,
  • policies and thresholds.
  • Experience with cloud log analysis, detection engineering and incident investigation.
  • Practical penetration testing experience across cloud and infrastructure, with working knowledge of web
  • application and API testing.
  • Understanding of common OWASP vulnerabilities, authentication and authorisation controls, and
  • application-to-cloud security risks.
  • Practical use of AI-assisted tools in security or engineering, with the ability to explain implemented use cases
  • and validate results.
  • Strong technical documentation and English communication skills, with the ability to work independently across
  • geographically distributed teams.
  • Desirable Qualifications
  • AWS Certified Security - Specialty and/or AWS Certified Solutions Architect - Professional are strongly preferred.
  • AWS Certified Solutions Architect - Associate, Terraform Associate or relevant Kubernetes certifications are
  • advantageous.
  • Security certifications such as OSCP, OSEP, GIAC, CISSP or CCSP are advantageous but are not required.
  • Experience with cloud security posture management, cloud workload protection and policy-as-code.
  • Experience with SOAR platforms, automated incident response or AI-enabled security workflows.
  • Experience in financial services, trading platforms, fintech or other business-critical environments.
  • Familiarity with CIS Benchmarks, MITRE ATT&CK, OWASP, NIST and ISO 27001.
  • Degree in Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical

experience

  • Personal Attributes
  • Strong ownership, independent judgement and accountability for technical outcomes.
  • A practical engineering approach with a preference for automation and sustainable solutions.
  • An investigative mindset and the ability to challenge assumptions with evidence.
  • Sound judgement when introducing changes or testing business-critical environments.
  • A collaborative approach that balances security requirements with operational needs.
  • Demonstrated technical capability, engineering outcomes and practical AWS expertise will carry greater weight
  • than certifications alone.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at IC Markets Global

Senior LLMOps / AI Platform Engineer

Dubai, UAE

Discovered 2 days agoFull-time

Salesforce business Analyst

Dubai, UAE

Discovered 2 days agoFull-time

.NET Engineer - Integration

Hyderabad, IND

Discovered 2 days agoFull-time

Technical Delivery Manager

Hyderabad, IND

Discovered 2 days agoFull-time

Accountant

Hyderabad, IND

Discovered 2 days agoFull-time

Emerging Talent Program - UAE National

Dubai, UAE

Discovered 2 days agoFull-time

Junior Marketing Data Analyst

Dubai, UAE

Discovered 2 days agoFull-time

Senior Accountant

Dubai, UAE

Discovered 2 days agoFull-time