cloud security engineer
CRED, bengaluru
What you will do
- work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security
- identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in aws-based systems
- own and continuously improve the cloud security posture management (cspm) program aligned with standards like nist 800-53 and iso 27001
- own the cloud workload protection program, including alert investigation and triage
- drive the data security charter, including data classification, masking, and securing large-scale data stores
- automate infrastructure security and build security tooling to reduce manual effort
- conduct security design, infrastructure, and architecture reviews
- build, operate, and maintain cloud security platforms to enhance prevention, detection, and response
- translate product requirements into threat models and identify security risks
- build in-house security frameworks to strengthen security culture across tech teams
- enable compliance across teams (pci dss, iso 27001, dpdpa) and promote best practices