cloud security engineer
Description
CRED is an exclusive community for India’s most trustworthy and CREDitworthy individuals, where the members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long lost virtue, one of trust, the idea being to create a community centered around this virtue. a community that constantly strives to become more virtuous in this regard till they finally scale their behavior to create a utopia where being trustworthy is the norm and not the exception. to build a community like this requires a community of its own; a community special in its own way, working towards making this vision come true
here’s a thought experiment: what do you get when you put a group of incredibly passionate and driven people and entrust them with the complete freedom to chase down their goals in a completely uninhibited manner? answer: you get something close to what we have at CRED; CRED just has it better
what you will do:
- work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security
- identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in aws-based systems
- own and continuously improve the cloud security posture management (cspm) program aligned with standards like nist 800-53 and iso 27001
- own the cloud workload protection program, including alert investigation and triage
- drive the data security charter, including data classification, masking, and securing large-scale data stores
- automate infrastructure security and build security tooling to reduce manual effort
- conduct security design, infrastructure, and architecture reviews
- build, operate, and maintain cloud security platforms to enhance prevention, detection, and response
- translate product requirements into threat models and identify security risks
- build in-house security frameworks to strengthen security culture across tech teams
- enable compliance across teams (pci dss, iso 27001, dpdpa) and promote best practices
- drive security awareness and engineering maturity across the organisation
you should apply if you have:
- 2–6 years of experience in information security Solid fundamentals on computer networks, operating systems (linux), containers and secure cloud architecture
- strong programming skills in python, go, or bash
- solid understanding of cloud security with hands-on experience in aws / gcp / azure
- experience building and automating custom security tools
- understanding of microservices, ci/cd pipelines, containers, and securing containerised workloads
- strong grasp of core security principles like least privilege, defence-in-depth, and zero trust
- a data-driven mindset with the ability to influence stakeholders
- security projects on github or technical blogs
- strong communication skills and the ability to be a go-to security partner for engineers and product teams
- a proactive approach to staying updated on security threats, breaches, tools, and research
- basic understanding of llms, mcp, and ai agents and Interest in building ai-driven security workflows.
- familiarity with vulnerability management, patching cycles, and cvss
Skills
As published by lever
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website