Cloud Security Engineer

Thakral One; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Thakral One is seeking a Cloud Security Engineer to drive security across banking and securities domains in a multi‑cloud setup. You will lead cloud security operations, enforce policies, and collaborate with IT to ensure resilient, compliant architectures.

You will implement CSPM/CWPP controls, oversee Kubernetes security, and participate in audits while staying current with ISO27001, NIST, CIS, and GDPR standards.

Qualifications

• 8–10 years of experience in Cloud, Information, or Cyber Security.
• Experience implementing security solutions that enable business activity.
• Active involvement in audits and managed audit relationships.

Responsibilities

• Cloud Security Operations: monitor and manage cloud security toolsets (CSPM, CWPP).
• Oversee Kubernetes security controls for workloads across multiple environments.
• Review architectures for security gaps and recommend mitigations.
• Investigate cloud security alerts using service workflows.
• Policy, standards & governance: ensure risk controls aligned to NIST, ISO2702, CIS.
• Develop, enforce cloud security standards and procedures.
• Conduct cyber security reviews across on‑prem, cloud, and third‑party systems.
• Support governance, risk, and compliance activities, including audits.
• Collaborate with IT teams to manage security alerts, threats, and vulnerabilities.
• Liaise with Tech and Business teams to meet security standards and mitigations.
• Provide operational insights to security engineering/architecture teams.
• Support cyber security incidents, testing, and remediation actions.
• Contribute to continual improvement of security controls and detection rules.
• Stay updated on laws, regulations and best practices in cyber security.

Skills

Cloud security

CSPM

CWPP

Kubernetes security

ISO27001

NIST

CIS

GDPR

Azure

OCI

AWS

CISSP

CISM

CCSP

Azure Security Engineer

AWS Security Specialty

CEH

Tools

CloudGuard

Wiz

Microsoft Defender for Cloud

CrowdStrike Falcon

AKS

EKS

OKE

Job description

As a Cloud Security Engineer, you will be responsible for Cloud Security (as part of Cyber Security) across both the banking arm and securities business under a dual‑hat arrangement. You will act and make decisions on behalf of both entities, ensuring comprehensive risk controls, compliance, and operational resilience across multi‑cloud environments.

What You'll Do and How You'll Succeed

Cloud Security Operations

• Monitor and proactively manage Cloud Security toolsets including CSPM (CloudGuard, Wiz, MS Defender for Cloud) and CWPP (CloudGuard, Wiz, CrowdStrike Falcon).
• Oversee Kubernetes security controls for workloads in AKS, OKE, EKS, and on‑prem environments.
• Review and assess enterprise cloud architectures for security gaps and recommend mitigations.
• Investigate and track cloud security alerts using ServiceNow workflows.

Policy, Standards & Governance

• Ensure NIST, ISO27002, and CIS‑aligned risk controls are covered.
• Develop, improve, and enforce cloud security standards, policies, and procedures.
• Conduct Cyber Security reviews for on‑prem, cloud, and third‑party systems, including firewall rules, architecture, and network designs.
• Support governance, risk, and compliance activities, including operational risk reporting and audit liaison.
• Collaborate with IT teams to highlight, manage, and mitigate Cyber Security alerts, threats, and vulnerabilities.
• Liaise with Technology and Business teams to ensure systems meet security standards or agree on mitigations.
• Provide operational insights to security engineering and architecture teams.
• Support Cyber Security incidents, penetration testing, and remedial actions.
• Contribute to continuous improvement of security controls and detection rules.
• Maintain up‑to‑date knowledge of laws, regulations, and best practices relating to Cyber Security.

We'd Love to Hear From You If...

Experience

• You have 8–10 years of experience in Cloud, Information, or Cyber Security.
• You have experience implementing security solutions that enable business activity.
• You have been actively involved in audits and managed audit relationships.

Technical Expertise

• You have strong knowledge of frameworks and standards such as ISO27001, NIST, CIS, GDPR.
• You are proficient in cloud security tools (CSPM, CWPP) and multi‑cloud environments (Azure, OCI, AWS).
• You are experienced with Kubernetes security, endpoint, network, and web access monitoring systems.
• You hold certifications such as CISSP, CISM, CCSP, Azure Security Engineer, AWS Security Specialty, or CEH (preferred).

Ways of Working

• You demonstrate excellent communication and interpersonal skills.
• You operate with urgency, accountability, and sound judgement.
• You are structured, logical, and proactive in your approach.
• You are comfortable taking ownership of workstreams and delivering difficult messages when needed.
• You are passionate about Cyber Security and proactive in identifying and mitigating risks.