Senior Security Engineer in Hyderabad, भारत

Responsibilities

• Own cloud-security posture and risk reduction across AWS, GCP, Kubernetes, containers, virtual machines, and supporting infrastructure.
• Investigate cloud misconfigurations and attack paths, determine actual exposure, prioritize risk, and drive remediation through verified closure.
• Perform security reviews of cloud services, infrastructure designs, network patterns, data flows, and high-risk architecture changes.
• Review Terraform and CI/CD workflows and develop preventive security controls and secure-by-default infrastructure patterns.
• Evaluate AWS IAM, GCP service accounts, workload identity, federation, trust relationships, and privileged access for least privilege.
• Assess Kubernetes RBAC, admission controls, network policies, secrets handling, runtime configurations, and workload isolation.
• Improve security of container images and virtual machines through secure base images, automated upgrades, and vulnerability remediation.
• Triage Wiz and other cloud-security findings, validate exploitability, identify root causes, and reduce recurring security issues.
• Build scripts, integrations, guardrails, dashboards, and automated remediation workflows for cloud-security problems.
• Define and report metrics covering external exposure, IAM risks, Kubernetes issues, unhealthy VMs and container images, remediation aging, and recurrence.
• Support cloud incident investigations through attack-path analysis, evidence collection, blast-radius assessment, containment guidance, and corrective controls.
• Represent Product Security in technical discussions, communicate risk and trade-offs, influence teams without direct authority, mentor engineers, and develop reusable security patterns.

Requirements

• At least 5 years of experience in security, infrastructure, platform engineering, or a related technical field, including at least 4 years of hands-on cloud-security experience.
• Deep practical production experience with AWS and GCP.
• Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
• Hands-on expertise with cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
• Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
• Experience using a CSPM platform such as Wiz to investigate and prioritize risk, with the ability to validate technical impact beyond tool output.
• Ability to automate security workflows using Python, Go, APIs, or similar technologies.
• Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
• Demonstrated ability to independently own ambiguous problems and drive cross-functional remediation to measurable completion.
• Excellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.
• Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.
• Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.

Benefits

• Group medical, personal accident, and term life insurance.
• Preventive healthcare coverage for dental, vision, and OPD needs, plus mental health support.
• Fitness benefit, car lease policy, and gratuity.