Cloud Engineer

Cloudxtreme; Bengaluru; Hybrid; INR 1,800,000 - 2,600,000; Full time

Job summary

Cloudxtreme in Bengaluru is seeking a security-focused professional to design and implement security controls across development and production environments. The role emphasizes threat modeling, secure code reviews, and vulnerability assessments for web and cloud-native apps.

You will collaborate with DevOps to embed security into CI/CD, monitor cloud posture with CSPM/CWPP tools, and enforce standards such as ISO 27001 and NIST while advancing zero trust and data protection strategies.

Responsibilities

• Design and implement security controls for applications and cloud environments across development and production stages.
• Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• Implement identity and access management, encryption, and key management practices in cloud environments.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• Implement Zero Trust and least privilege principles for application and infrastructure access.
• Provide guidance on secure application architecture, container security, and data protection strategies.
• Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.

Job description

Preferred candidate profile

• 1. Design and implement security controls for applications and cloud environments across development and production stages.
• 2. Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• 3. Implement identity and access management, encryption, and key management practices in cloud environments.
• 4. Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• 5. Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• 6. Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• 7. Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• 8. Implement Zero Trust and least privilege principles for application and infrastructure access.
• 9. Provide guidance on secure application architecture, container security, and data protection strategies.
• 10. Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.