India
Remote only
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr Security Engineer based in India.
We are seeking an experienced Senior Security Engineer to strengthen cloud security across enterprise systems, platforms, and customer-facing services. In this hands-on technical leadership role, you will design and implement scalable security controls, automate protective measures, and embed security directly into development and deployment workflows. You will work across cloud infrastructure, Kubernetes, vulnerability management, and incident response to reduce risk and improve resilience. Partnering with engineering, IT, and compliance teams, you will translate complex security requirements into practical, automated solutions. You will also mentor fellow engineers, guide architectural decisions, and establish standards that support secure operations at scale. This remote opportunity is ideal for a seasoned security professional who combines deep technical expertise with a proactive, engineering-driven approach to security.
Architect and implement cloud security controls across multi-cloud environments, including network segmentation, security groups, network access control lists, identity and access management (IAM), least-privilege permissions, and organizational security policies.
Develop policy-as-code frameworks and infrastructure-as-code (IaC) security guardrails, integrating automated security checks into CI/CD pipelines as pre-merge and pre-deployment controls.
Strengthen container and Kubernetes security through image scanning, admission controls, pod security standards, and runtime threat detection.
Build automated remediation workflows to address cloud misconfigurations, configuration drift, and recurring security findings without relying solely on manual intervention.
Lead vulnerability management activities and serve as a technical escalation point for security incidents, coordinating investigations, forensic analysis, containment, root cause analysis, and remediation.
Develop and improve security detections and response workflows using cloud-native security capabilities, endpoint detection and response (EDR), SIEM/SOAR platforms, and vulnerability management tools.
Collaborate with Risk and Compliance teams to translate SOC 2, ISO 27001, PCI-DSS, FedRAMP, and other applicable frameworks into actionable technical controls.
Automate compliance evidence collection by integrating cloud telemetry and security data with governance, risk, and compliance (GRC) systems.
Mentor security engineers through technical design reviews, threat modeling, code reviews, and architecture assessments.
Maintain reference architectures, threat models, technical documentation, and operational runbooks for security tooling and controls.
Participate in and help improve the security team's on-call rotation, promoting reliable operations and continuous security improvement.
10+ years of security engineering experience, including substantial hands-on responsibility for securing production cloud environments at scale.
Demonstrated experience leading technical projects, influencing security architecture, or mentoring other engineers.
Deep practical expertise in AWS security, including IAM, VPC networking, AWS Key Management Service (KMS), GuardDuty, Security Hub, AWS Config, and Organizations/Service Control Policies (SCPs).
Working knowledge of security controls and architecture in Google Cloud Platform (GCP) or Microsoft Azure is an advantage.
Production experience with Terraform or equivalent infrastructure-as-code tools, policy-as-code frameworks, and automated security guardrails.
Hands-on experience securing containers and Kubernetes workloads in production environments.
Strong software engineering skills in Python and/or Go, with familiarity with Git-based development workflows and maintaining CI/CD security integrations.
Experience integrating security testing into development pipelines, including static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
Practical experience with SIEM/SOAR platforms and vulnerability management tools such as Wiz, Qualys, or Tenable, including building detections, automations, and response workflows.
Working knowledge of compliance frameworks such as SOC 2, ISO 27001, PCI-DSS, FedRAMP, and NIST 800-53, with the ability to convert control requirements into engineering solutions.
Excellent written and verbal communication skills, including the ability to document technical designs and explain security risks and trade-offs to auditors, engineers, and leadership.
A bachelor's degree in Computer Science, Information Systems, or a related discipline, or equivalent practical experience.
Relevant certifications such as CISSP, CCSP, CISA, or AWS/GCP security certifications are an advantage.
Willingness to undertake international travel when required.
Competitive compensation: Starting salary determined by relevant skills, experience, and geographic location. No specific salary range is published for this position.
Remote work: The position is listed as remote in India.
Location-specific benefits: Medical and dental insurance, retirement or pension plans, and life or accident protection, depending on the applicable regional package.
Paid wellness days: Two company-wide paid wellness days each year to support rest and work-life balance.
Birthday leave: One paid day off during your birthday month.
Volunteer time off: Up to 40 hours of paid volunteer leave annually to support community initiatives.
Employee Assistance Program: Confidential, round-the-clock access to counseling and resources for emotional well-being, work-life challenges, financial guidance, legal support, and new-parent needs.
Business travel assistance: Access to medical, safety, trip-planning, and emergency support during business travel.
Referral bonuses: Monetary rewards for successful employee referrals, subject to the applicable program terms.
Professional growth: Opportunities to influence security architecture, build automation at scale, and mentor engineers across complex cloud environments.
Collaborative environment: Work closely with engineering, IT, and compliance teams to improve security practices and deliver measurable risk reduction.
