Cloud Security Engineer

Description : About The Role

We are seeking a dedicated Cloud Security Engineer to fortify our cloud infrastructure and application stack against emerging threats.

This role is responsible for implementing security-as-code principles, ensuring compliance, and integrating robust security controls into our CI / CD pipelines and cloud environments (primarily on GCP or AWS).

Key Responsibilities :

• Cloud Security Architecture : Design and implement security best practices and policies across the cloud environment, focusing on identity and access management (IAM), network security, and data protection.
• Security Automation (DevSecOps) : Integrate security tools and processes (SAST, DAST, SCA) into the CI / CD pipeline to automate security testing and vulnerability detection early in the development lifecycle.
• Vulnerability & Threat Management : Conduct regular security assessments, penetration testing, and vulnerability scans.
• Analyze and remediate security findings across infrastructure and application code.
• Compliance & Audit : Ensure the cloud environment adheres to industry standards and regulatory requirements (e.g., ISO 27001, SOC 2, PCI DSS).
• Incident Response : Participate in security incident response planning and execution, including forensic analysis and post-mortem reporting.

Technical Skills (Must-Have) :

(ref : hirist.tech)