Associate Security Engineer

Minfy Technologies; Hyderabad; On-site; INR 900,000 - 1,500,000; Full time

Job summary

Minfy Technologies is seeking an Associate Cloud Security Engineer to support cloud security operations across AWS, Azure, and GCP for multiple clients. You will monitor, triage, and respond to security events while collaborating with Cloud Operations and service delivery teams.

The role emphasizes vulnerability management, compliance reporting, IAM governance, and automation to improve security postures through CI/CD integration and process improvements.

Qualifications

• Foundational knowledge of cloud security concepts across AWS, Azure, or GCP.
• Familiarity with CIS Benchmarks, ISO 27001, NIST, SOC 2.
• Understanding of firewalls, VPNs, IDS/IPS, endpoint protection, and encryption concepts.
• Exposure to SIEM, vulnerability management, and security compliance tools.
• Basic scripting ability in Python, PowerShell, or Bash for automation.
• Strong analytical and problem-solving mindset.
• Good written and verbal communication for client-facing discussions.

Responsibilities

• Monitor security alerts from client environments and respond per SOPs and SLAs.
• Triage, analyze, and escalate incidents; coordinate with L3 teams for remediation.
• Track incident metrics and prepare monthly/weekly security reports for clients.
• Conduct vulnerability scans with Qualys/Tenable/AWS Inspector and track remediation.
• Maintain CIS/NIST/ISO 27001 compliance status and patch dashboards.
• Review IAM policies, roles, MFA, and perform periodic access reviews.
• Assist automating tasks with Python/PowerShell/Terraform and CI/CD security checks.
• Prepare governance reports and support client/security audits.

Skills

Cloud security fundamentals

Multi-cloud security

Incident response

Automation & scripting

IAM governance

Analytical mindset

Client communication

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

AWS Security Hub

Azure Defender

SIEM (Splunk/QRadar)

Qualys/Tenable

Terraform

Python

PowerShell

Job description

Job Description – Associate Cloud Security Engineer

Experience: 1–4 years

Role Overview

The Associate Cloud Security Engineer plays a key role in supporting cloud security operations for multiple managed service clients. The role involves continuous monitoring, vulnerability management, incident response, and governance to ensure a compliant and secure multi-cloud ecosystem (AWS, Azure, and GCP).

The ideal candidate will work closely with the cloud operations and service delivery teams to identify risks, enforce security baselines, and contribute to automation and continuous improvement initiatives.

Key Responsibilities

Cloud Security Monitoring & Incident Management

• Monitor and respond to security alerts from client environments using tools such as AWS Security Hub, Azure Defender, and SIEM platforms (e.g., Sentinel, Splunk, QRadar).
• Perform initial triage, analysis, and escalation of incidents as per defined SOPs and SLAs.
• Collaborate with Cloud Operations and L3 teams for remediation and root cause analysis.
• Track incident metrics and prepare daily/weekly security reports for clients.

Vulnerability & Compliance Management

• Conduct scheduled vulnerability scans using Qualys, Tenable, or AWS Inspector.
• Support vulnerability remediation tracking and ensure SLA compliance.
• Maintain and report compliance status against CIS, NIST, ISO 27001, and client-specific baselines.
• Ensure proper patch compliance and assist in risk reporting dashboards.

Identity & Access Management

• Review and manage IAM policies, role assignments, and MFA enforcement across client environments.
• Assist in periodic access reviews and compliance reporting.
• Ensure adherence to least-privilege and zero-trust principles.

Automation & Process Enhancement

• Support automation of repetitive tasks such as policy checks and remediation using scripts (Python, PowerShell, or Terraform).
• Work with the DevOps and CloudOps teams to integrate security checks within CI/CD pipelines.
• Contribute to process improvement initiatives and knowledge base updates.

Governance, Reporting & Client Support

• Maintain accurate documentation of incidents, compliance evidence, and configurations.
• Generate monthly security posture and compliance reports for client reviews.
• Participate in client governance calls to present security insights and improvement actions.
• Support internal and client audits with required evidence and logs.

- Foundational knowledge of cloud security concepts and services in AWS, Azure, or GCP.

- Familiarity with security frameworks: CIS Benchmarks, ISO 27001, NIST, SOC 2.

- Understanding of firewalls, VPNs, IDS/IPS, endpoint protection, and encryption concepts.

- Exposure to SIEM, vulnerability management, and security compliance tools.

- Basic scripting ability in Python, PowerShell, or Bash for automation.

- Strong analytical and problem-solving mindset.

- Good written and verbal communication for client-facing discussions.

Preferred Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent.
• Certifications (any of the following preferred):

• AWS Certified Cloud Practitioner / Security Specialty (Associate level)
• Microsoft SC-900 / AZ-900
• CompTIA Security+
• Exposure to tools such as Prisma Cloud, GuardDuty, Defender for Cloud, Tenable, Qualys, or CrowdStrike.