Security Cloud Security Engineer

About the role

Cloud Security Engineer / Lead role responsible for leading cloud security initiatives, designing and implementing security controls across AWS, Azure, and GCP, ensuring compliance with major frameworks, and providing technical leadership to junior security engineers. The role encompasses cloud posture management, governance, risk mitigation, incident response, and collaboration with cross-functional teams to embed security into cloud operations.

Key responsibilities

• Lead cloud security initiatives, define action plans, timelines, and deliverables
• Mentor junior security engineers and provide technical guidance
• Monitor team performance and drive continuous improvement
• Design, implement, and maintain security controls across AWS, Azure, and GCP
• Perform cloud infrastructure hardening and security configuration reviews
• Monitor and continuously improve cloud security posture
• Develop and enforce cloud security policies, standards, and procedures
• Ensure compliance with NIST, ISO 27001, CIS, GDPR, HIPAA, and PCI-DSS requirements
• Identify, assess, prioritize, and mitigate cloud security risks
• Provide Level 3 technical support for cloud security incidents

About you

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field
• At least 2 years of cloud infrastructure/security experience, preferably in fintech or financial services
• 2–3 years of experience with IAM: Okta, AWS IAM, SSO, MFA, VPN
• 2–3 years of experience with Cloud: AWS Security Hub, S3, Route 53, CloudWatch, Azure, GCP, DigitalOcean
• 2–3 years of experience with Security Monitoring: CloudTrail, GuardDuty, Trend Micro Vision One, CrowdStrike Falcon, Splunk
• 2–3 years of experience with SSL/TLS: AWS ACM, OpenSSL, CSR, AWS ALB
• 2–3 years of experience with Scripting: AWS CLI, Python, Bash, PowerShell
• 2–3 years of experience with Systems: Linux and Windows administration
• 2–3 years of experience with DevOps/Agile: Jira, Confluence, GitLab, Scrum
• 2–3 years of experience with Key Management: AWS KMS, AWS Secrets Manager, HashiCorp Vault