Key Responsibilities: 

● Design, implement, and maintain security measures for our AWS-based infrastructure, focusing on EKS (Elastic Kubernetes Service) and microservices architecture. 

● Conduct architecture reviews and develop security architectures for new and existing systems. 

● Conduct advanced penetration testing and security assessments for cloud infrastructure and applications. 

● Manage and optimize our Web Application Firewall (WAF) and other cloud-native security tools. 

● Implement and maintain logging, monitoring, and incident response processes. 

● Work with SIEM solutions and SOC teams to enhance threat detection and response capabilities. 

● Enhance security measures for our CI/CD pipeline, including GitHub Actions, ArgoCD, and Jenkins.
 
● Collaborate with development teams to integrate security into the software development lifecycle. 

● Stay updated with the latest cloud security trends and technologies, recommending and implementing improvements as needed. 

● Utilize Terraform or AWS CDK to build and maintain secure and compliant infrastructure. 

● Set up and manage comprehensive monitoring solutions using cloud-native and third-party tools 

● Develop and maintain incident response plans for cloud and hybrid environments 

● Lead incident response efforts for cloud and infrastructure-related security events 

● Implement automated security incident detection and response mechanisms 

● Conduct post-incident analysis and contribute to continuous improvement of security posture 

Requirements: 

● 4-7 years of experience in cloud security, with a strong focus on AWS environments. 

● Hands-on experience with EKS, Kubernetes, and microservices architectures. 

● Proficiency in logging, monitoring, and incident response processe 

● Experience with SIEM solutions and SOC operations. 

● Strong understanding of networking concepts and security principles. 

● Expertise in conducting architecture reviews and developing security architectures. 

● Experience with Web Application Firewalls (WAF) and other cloud-native security tools. 

● Proficiency in securing CI/CD pipelines, including experience with GitHub Action ArgoCD, and Jenkins. 

● Strong scripting skills (e.g., Python, Bash) for automation and security tooling. 

● Excellent problem-solving, analytical thinking, and communication skills. Preferred Qualifications: 

● Relevant certifications such as AWS Certified Security - Specialty, CCSP, or equival 

● Experience with compliance frameworks relevant to the e-commerce and quick commerce industries. 

● Knowledge of container security best practices.

Senior Cloud Security Engineer in Mumbai (UID-6638)

Job Description

Job Details

Skills Required for Senior Cloud Security Engineer

Job Description for Senior Cloud Security Engineer