aws cloud security

CloudXtreme Technology Private Ltd; Hyderabad, Chennai District, Bengaluru; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

CloudXtreme Technology Private Ltd is seeking a skilled Cloud Security Engineer to join our security operations. The role focuses on design and implementation of CNAPP onboarding, SCP/IAM governance, and automation pipelines across AWS.

You will build and validate policy-as-code, integrate with logging, monitoring, and ticketing workflows. You will work on Terraform modules, Python automation (boto3), and CI/CD scanners, delivering measurable improvements in posture, coverage, MTTR, and

Qualifications

• Experience designing CNAPP onboarding and CSPM pipelines.
• Strong scripting in Python for automation and evidence collection.
• Hands-on with IAM policy governance and SCP design.

Responsibilities

• Design SCPs and IAM policies to enforce least privilege.
• Implement CNAPP tooling configurations (Wiz) and posture policies.
• Develop CI/CD gated security checks and shift-left validation.
• Build and maintain telemetry pipelines (Cribl, Kinesis) and logs.

Skills

CNAPP onboarding

Terraform

Python (boto3)

IAM policy JSON

SCP design

Wiz CNAPP configuration

AWS Config

Cribl

CI/CD pipelines

Shift-left validation

Tools

GitHub Actions

Azure DevOps

AWS CLI

Cribl

Kinesis

Job description

1. 1. AWS Organizational Governance: Service Control Policies (SCP) design, multi-account patterns, delegated admin setups.
2. 2. Logging & Audit Foundations: Org CloudTrail, AWS Config aggregator, S3 log archive hardening, GuardDuty, Security Hub.
3. 3. CSPM / CNAPP Operations(Wiz.io): Onboarding accounts/resources, tuning posture policies, integrating with ticketing and log routing (e.g., Cribl/SIEM).
4. 4. Infrastructure as Code: Terraform modules, reusable patterns, policy-as-code integration, CI scanning.
5. 5. Vulnerability & Risk Prioritization: Combining CVSS, exploit context, asset criticality, and signal sources into severity logic.
6. 6. Automation & Scripting: Python (boto3), AWS CLI, shell tooling for validation, evidence export, reporting.
7. 7. Identity & Access: IAM least privilege, cross-account role assumptions, permission boundaries, automation roles.
8. 8. Observability / Data Routing (Plus): Cribl / Firehose / Kinesis or equivalent pipeline familiarity.
9. 9. Compliance Awareness: HIPAA safeguard themes (auditability, access control, data protection, etc).
10. 10. Metrics & Reporting: Designing & extracting KPIs (coverage %, MTTR, SLA compliance, control efficacy).

Technical Skills

Skill Depth Needed Context

• Terraform Advanced CNAPP onboarding, scanning pipeline
• Python (boto3) Advanced Validation & evidence automation
• AWS Security Services Deep Guardrails + findings pipeline
• SCP / IAM Policy JSON Deep Precise preventive controls
• CNAPP tooling Advanced Wiz configuration
• AWS Config / Conformance
• Packs Advanced Framework rule deployment
• Event & Log Pipelines Intermediate Cribl
• CI/CD (GitHub Actions, Azure DevOps, or similar) Intermediate Shift-left scanning & gating