Cloud Security Engineer

Point72; Bengaluru; On-site; INR 2,600,000 - 6,000,000; Full time

Job summary

Point72 is seeking an experienced Cloud Security Engineer to shape and enforce security across AWS, GCP, and Azure. You will lead the implementation of control frameworks, IAM guardrails, and policy-as-code to strengthen security at scale.

You will collaborate with engineering and leadership to embed security requirements into architecture, pipelines, and operations, while advancing CSPM and CDR capabilities to improve visibility and resilience.

Qualifications

• 5+ years in Cloud Security / Cloud Engineering with hands-on AWS/GCP/Azure experience.
• Deep understanding of cloud architecture, security best practices, and secure cloud app delivery.
• IAM concepts: least privilege and access governance.
• Hands-on policy-as-code with OPA to enforce controls.
• Experience with CSPM and CDR tools (Wiz/Prisma Cloud).
• Proven track record of improving security operational processes and risk remediation.
• Strong communication, collaboration with security, engineering, and leadership stakeholders.

Responsibilities

• Shape cloud security across AWS, GCP, and Azure environments.
• Advance cloud security posture management with risk identification and remediation prioritisation.
• Develop and enforce KRIs for compliance with NIST CSF and CCM.
• Design IAM guardrails for least privilege and secure cloud adoption.
• Ensure logging and monitoring across cloud infra, services, identities, and workloads.
• Build security-as-code controls using OPA to automate policy enforcement.
• Partner with engineering to embed security in cloud architecture, pipelines, and processes.
• Manage cloud risk with CSPM and CDR tools.
• Investigate findings and coordinate remediation with accountable teams.

Skills

Cloud security

AWS

GCP

Azure

IAM / least privilege

OPA / Policy-as-Code

CSPM tools (Wiz)

CDR tools

Risk remediation

Cross-functional collaboration

Tools

Wiz

Prisma Cloud

Job description

Responsibilities

• Shape cloud security across AWS, GCP, and Azure environments.
• Advance cloud security posture management by identifying risk, prioritising remediation, and helping teams strengthen controls at scale.
• Develop and enforce Key Risk Indicators (KRIs) to ensure compliance with industry-leading frameworks such as NIST CSF and Cloud Security Alliance CCM, leading to cloud security operational excellence.
• Design cloud-focused identity and access management guardrails that enforce least privilege and support secure, efficient cloud adoption.
• Ensure appropriate logging and monitoring across cloud infrastructure, services, identities, and workloads to improve visibility and response readiness.
• Build security-as-code controls using OPA to automate policy enforcement and reduce manual review across cloud deployments.
• Partner with engineering teams to embed security requirements into cloud architecture, delivery pipelines, and operational processes.
• Manage cloud risk through Cloud Security Posture Management (CSPM) and Cloud Detection and Response (CDR) tools.
• Investigate cloud security findings and coordinate remediation with accountable teams to reduce exposure and strengthen resilience.

Requirements

• Five or more years of experience in cloud security or cloud engineering, with a focus on hands- on experience managing cloud security posture across AWS, GCP, and Azure environments, with an emphasis on AWS.
• Deep understanding of cloud architecture, frameworks and cloud security best practices, and a proven track record of successfully implementing secure, highly available cloud applications.
• Strong understanding of identity and access management principles in cloud environments, including least privilege and access governance.
• Hands-on experience building security-as-code or policy-as-code controls using OPA.
• In-depth experience with Cloud Security Posture Management (CSPM) platforms such as Wiz or Prisma Cloud and Cloud Detection and Risk (CDR) tools.
• Experience improving cloud security operational processes, including control validation, remediation tracking, and continuous improvement.
• Strong analytical, communication, and collaboration skills, with the ability to work effectively across security, engineering, and leadership stakeholders.
• Commitment to the highest ethical standards.

Must Have

• 5+ years in Cloud Security / Cloud Engineering.
• Strong AWS experience.
• Hands-on experience across AWS, GCP and Azure.
• Strong Cloud Security Architecture knowledge.
• IAM / Least Privilege / Access Governance.
• Hands-on OPA / Policy-as-Code / Security-as-Code.
• Experience with CSPM.
• Experience with Wiz or Prisma Cloud.
• Experience with Cloud Detection and Response (CDR).
• Cloud security risk assessment and remediation.