AWS Cloud Security Engineer

Globex Digital; India; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Globex Digital is seeking an AWS Cloud Security Engineer to safeguard sensitive data in AWS environments. This mid-senior level role involves designing security measures, conducting vulnerability assessments, and collaborating with teams to ensure compliance with industry standards. Ideal candidates should have strong AWS knowledge, experience with security tools, and a relevant degree.

Qualifications

• Strong understanding of AWS security best practices.
• Proficiency in scripting languages like Python or Bash.
• Experience with incident response and security monitoring.

Responsibilities

• Design and implement security measures for AWS environments.
• Conduct vulnerability assessments and coordinate remediation efforts.
• Document security policies and train employees on security awareness.

Skills

AWS services

Security concepts

Network security

Vulnerability management

Incident response

Scripting languages

Automation tools

Database services

Education

Relevant Bachelor's Degree in Information Security or related field

Tools

AWS Management Tools

SAST/DAST tools

Security monitoring tools

Job description

1 week ago Be among the first 25 applicants

Direct message the job poster from Globex Digital

19k+ LinkedIn Family || Tech Recruiter || Globex Digital

AWS Cloud Security Engineer

As an AWS Cloud Security Engineer you will be responsible for design, implementation, and management of security measures within NCB AWS environments to protect sensitive data and systems. You will work with engineering team to identify and remediate security vulnerabilities, ensuring compliance with industry standards and regulations.

Key Responsibilities

Security Design and Implementation:

• Design, implement, and maintain security controls and policies within the NCB AWS environment, including identity and access management, encryption, and networking.
• Build least-privilege IAM roles and permission boundaries
• Deploy edge protections—CloudFront + WAF custom rules, AWS Shield Advanced, Firewall Manager.

Vulnerability Assessment and Remediation:

• Identify and address vulnerabilities in AWS infrastructure and applications, using tools like penetration testing and threat simulations.
• Run SAST/DAST, container CVE scans, dependency-check reports; track remediation to closure.
• Coordinate with Dev team to certify fixes.
• Develop run-books for DDoS, credential compromise, and data-breach scenarios

Centralised Logging, Monitoring & Alerting:

• Ensure CloudTrail Lake, VPC Flow Logs, EKS audit logs, and Lambda/X-Ray traces feed a unified SIEM
• Define actionable metrics/alarms for auth failures, anomalous API calls, WAF blocks, GuardDuty findings.

Compliance and Governance:

• Ensure compliance with industry standards like NIST as well as internal security policies.
• Respond to and resolve security incidents, following documented procedures and playbooks that you will be responsible for designing.

Collaboration and Communication:

• Collaborate with other teams, including engineering, operations, and NCB InfoSec security team, to ensure a strong security posture.
• Partner with Infrastructure and Load-Test engineers on secure topology, scaling, and DR drills.
• Monitor spend on Shield Advanced, GuardDuty, and KMS; optimise log-storage retention and security-service quotas.

Documentation and Training:

• Document security policies,procedures, and configurations, as well as provide training and awareness to other employees.

Technical Skills

Security Principles:

• Strong understanding of security concepts, principles, and best practices.

Cloud Security Best Practices:

• Understanding of industry-standard security practices and compliance frameworks like PCI DSS, HIPAA, and GDPR.
• Strong understanding of AWS services, especially those related to security like IAM, VPC, CloudTrail, CloudWatch, KMS, and Shield.

Networking:

• Solid understanding of network security concepts, including firewalls, VPNs, and intrusion detection/prevention systems.

Security Controls:

• Knowledge of various security controls, such as access controls, encryption, and vulnerability management.
• AWS WAF (managed & custom rules), Shield Advanced, Firewall Manager, AWS Network Firewall.

Vulnerability Management & Pen-Testing

• SAST/DAST tooling (CodeGuru, SonarQube, OWASP ZAP/Burp)
• Lambda runtime scanning, SnapStart security considerations, least-privilege function roles.

Programming/Scripting:

• Proficiency in scripting languages like Python, Bash, and PowerShell, and potentially other languages like Java or SQL.

Automation:

• Experience with automation tools and frameworks for deploying and managing security controls and infrastructure.

Security Monitoring and Logging:

• Ability to monitor and analyze cloud-based applications, collect data, and identify potential security threats.
• Use GuardDuty, Security Hub, Detective, CloudTrail Lake
• Familiarity with incident response planning and investigation techniques.

Database Services:

• Knowledge of AWS database services like Amazon RDS, DynamoDB, and Aurora.
• Containerization:
• Understanding of containerization technologies like Docker and Kubernetes, and their security aspects.

Cloud Security Tools:

• Familiarity with cloud access security brokers (CASB), cloud workload protection platforms (CWPP), and other security tools.

Vulnerability Assessment and Penetration Testing:

• Experience with tools and techniques for identifying and assessing vulnerabilities.

Threat Modeling:

• Ability to analyze and model potential threats to the AWS environment.

Compliance and Governance:

• Knowledge of industry standards and regulatory requirements.

Communication and Collaboration:

• Strong communication and collaboration skills to work effectively with other teams.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Contract

Job function

• Job function

  Engineering and Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Globex Digital by 2x

Get notified about new Security Engineer jobs in India.

Offensive Security Engineer, Offensive Security

Associate Security Operations Center Engineer (Remote)

Information Security Analyst Level III - SIEM

Security Engineer L3 (Endpoint Security)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.