Cloud Security Engineer

Happiest Minds Technologies; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

Happiest Minds Technologies is seeking a Cloud Security Engineer in Bengaluru to strengthen cloud and infrastructure security across AWS and GCP, implement guardrails, and drive security monitoring and automation.

You will manage CNAPP findings, ensure IAM governance, and develop Policy-as-Code for Terraform environments while coordinating incident response and security reporting.

Qualifications

• 35+ years of experience in Cloud Security, Infrastructure Security, DevSecOps, or Security Engineering.
• Strong hands-on experience with AWS services: IAM, Networking, Logging, KMS/Encryption.
• Good working knowledge of GCP, especially BigQuery IAM and governance.
• Experience with CNAPP/CSPM tools; SentinelOne CNAPP preferred.
• Strong scripting/automation skills using Python, Go, or Node.js.
• Hands-on experience with Terraform.
• Understanding of cloud IAM, security misconfigurations, privilege escalation, credential security, and data protection.
• Knowledge of cloud logging and incident response fundamentals.
• Cloudflare WAF/WARP and origin protection knowledge is a plus.

Responsibilities

• Strengthen security posture across AWS and GCP and remediate cloud misconfigurations.
• Manage and prioritize SentinelOne CNAPP findings based on exposure and exploitability.
• Implement IAM governance, privileged access reviews, and automated drift detection.
• Develop guardrails and Policy-as-Code controls for Terraform environments.
• Monitor cloud attack surface for public resources and security configuration drift.
• Ensure logs from AWS CloudTrail, GCP Audit Logs, and Cloudflare are searchable in SentinelOne AI SIEM.
• Support cloud security investigations, root cause analysis, and remediation.
• Prepare security posture reports and compliance evidence related to IAM, logging, encryption, and access governance.

Skills

AWS

GCP

CNAPP/CSPM

Python/Go/Node.js

Terraform

Cloudflare

Tools

SentinelOne CNAPP

SentinelOne AI SIEM

Job description

Cloud Security Engineer

The Cloud Security Engineer will be responsible for strengthening cloud and infrastructure security across AWS and GCP. The role involves reducing cloud attack surfaces, improving IAM and infrastructure security, implementing security automation, and ensuring effective security monitoring and detection.

Key Responsibilities

• Strengthen security posture across AWS and GCP and remediate cloud misconfigurations and exposures.
• Manage and prioritize SentinelOne CNAPP findings based on exposure, criticality, and exploitability.
• Implement IAM governance, privileged access reviews, and automated drift detection.
• Develop security guardrails and Policy-as-Code controls for Terraform environments.
• Monitor cloud attack surface for public resources, direct-to-origin exposure, and security configuration drift.
• Ensure security logs from AWS CloudTrail, GCP Audit Logs, and Cloudflare are available and searchable in SentinelOne AI SIEM.
• Support cloud security investigations, root cause analysis, and remediation.
• Prepare security posture reports and compliance evidence related to IAM, logging, encryption, and access governance.

Mandatory Qualifications

• 35+ years of experience in Cloud Security, Infrastructure Security, DevSecOps, or Security Engineering.
• Strong hands-on experience with AWS, especially:
  • IAM
  • Networking
  • Logging
  • KMS/Encryption
• Good working knowledge of GCP, especially BigQuery IAM and governance.
• Experience with CNAPP/CSPM tools; SentinelOne CNAPP preferred.
• Strong scripting/automation skills using Python, Go, or Node.js.
• Hands-on experience with Terraform.
• Good understanding of cloud IAM, security misconfigurations, privilege escalation, credential security, and data protection.
• Knowledge of cloud logging and incident response fundamentals.
• Cloudflare WAF/WARP and origin protection knowledge is an added advantage.

Key Skills

AWS | GCP | IAM | BigQuery | SentinelOne CNAPP | SentinelOne AI SIEM | CSPM | Terraform | Python/Go/Node.js | Cloud Security | DevSecOps | Cloudflare | CloudTrail | GCP Audit Logs | Policy-as-Code