Improve security of container images and virtual machines through secure base images, automated upgrades, and vulnerability remediation.
Triage Wiz and other cloud-security findings, validate exploitability, identify root causes, and reduce recurring security issues.
Build scripts, integrations, guardrails, dashboards, and automated remediation workflows for cloud-security problems.
Define and report metrics covering external exposure, IAM risks, Kubernetes issues, unhealthy VMs and container images, remediation aging, and recurrence.
Support cloud incident investigations through attack-path analysis, evidence collection, blast-radius assessment, containment guidance, and corrective controls.
Represent Product Security in technical discussions, communicate risk and trade-offs, influence teams without direct authority, mentor engineers, and develop reusable security patterns.
Requirements
At least 5 years of experience in security, infrastructure, platform engineering, or a related technical field, including at least 4 years of hands-on cloud-security experience.
Deep practical production experience with AWS and GCP.
Strong knowledge of Kubernetes, containers, Linux, virtual machines, cloud networking, storage, secrets management, encryption, and logging.
Hands-on expertise with cloud IAM, including AWS IAM, GCP service accounts, workload identity, federation, policy evaluation, and least-privilege design.
Experience reviewing or developing Terraform and integrating security controls into CI/CD workflows.
Experience using a CSPM platform such as Wiz to investigate and prioritize risk, with the ability to validate technical impact beyond tool output.
Ability to automate security workflows using Python, Go, APIs, or similar technologies.
Strong understanding of cloud attack techniques, privilege escalation, lateral movement, internet exposure, data exfiltration, and workload isolation.
Demonstrated ability to independently own ambiguous problems and drive cross-functional remediation to measurable completion.
Excellent written and verbal English communication skills, including the ability to explain technical risk and remediation to engineers and leaders.
Experience mentoring engineers or leading technical initiatives across multiple teams is strongly preferred.
Relevant certifications such as AWS Certified Security - Specialty, Google Professional Cloud Security Engineer, CKS, CISSP, or equivalent practical experience are desirable.
Benefits
Group medical, personal accident, and term life insurance.
Preventive healthcare coverage for dental, vision, and OPD needs, plus mental health support.