Cloud Security Engineer

Tookitaki; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

TookiTaki in Bengaluru, India, seeks a Cloud Security Engineer to design, harden, and defend cloud environments powering our AI-driven AML and fraud-detection platforms for global banks and fintechs.

You will drive secure-by-default deployments, patching, compliance, and incident response with SIEM/SOAR, IaC, and zero-trust IAM. Ideal candidate has 5–9 years of cloud security experience and hands-on AWS expertise.

Qualifications

• Bachelor’s degree in CS/Engineering/Cybersecurity required.
• 5–9 years in cloud engineering or cloud security roles.
• Hands-on experience securing AWS and regulated environments (fintech/banking preferred).

Responsibilities

• Design and implement secure cloud architectures across AWS and other clouds.
• Harden infrastructure and enforce enterprise-grade security, availability, and performance.
• Lead threat detection, incident response, and continuous monitoring.
• Integrate security into CI/CD pipelines (SAST/DAST/IAST, IaC).
• Manage IAM, least-privilege, and zero-trust access models.
• Plan and execute disaster recovery and business continuity tests.

Skills

Cloud security

Security automation

Threat detection

DevSecOps

IAM / zero-trust

Education

Bachelor's degree in Computer Science, Engineering, or Cybersecurity

Master's degree in Cybersecurity or Cloud Security (preferred)

Tools

Terraform

CloudFormation

Kubernetes security

Docker

EKS

GuardDuty

Security Hub

GCP SCC

Prisma

Wiz

ELK

Prometheus

Grafana

Job description

TookiTaki, the global leader building the Trust Layer for Financial Services, is strengthening its cloud security foundation as we scale our AI-driven AML and fraud-detection platforms across global banks and fintechs. We are looking for a Cloud Security Engineer who blends deep cloud expertise with uncompromising security standards — someone who can design, harden, and defend the cloud environments that power our mission. If secure, resilient, and scalable infrastructure is your playground, welcome home

1. Cloud Security Architecture

• Design and implement secure cloud architectures across AW
• SEnsure systems meet enterprise-grade security, availability, and performance requirements
• .Drive secure-by-default principles across deployments, services, and automation pipelines

.2. Security Hardening & Compliance

• Own and maintain PCI-DSS–aligned cloud security controls
• .Lead infrastructure hardening across compute, data, storage, network, and IAM
• .Implement end-to-end compliance guardrails, auditing, and continuous monitoring
• .Drive patching, vulnerability management, and threat exposure reduction

.3. Threat Detection & Incident Response

• Develop runtime threat detection and alerting frameworks (SIEM/SOAR, IDS, CSPM)
• .Conduct compromise assessments and respond to potential breaches with speed and clarity
• .Act as the primary escalation point for security incidents and lead root cause analysis
• .Continuously enhance detection logic using emerging threats from the AFC ecosystem

.4. Security Automation & DevSecOps

• Integrate security tooling into CI/CD workflows (SAST, SCA, DAST, secrets scanning)
• .Automate policies using IaC (Terraform/CloudFormation) and policy-as-code frameworks
• .Build automated remediation playbooks to reduce manual intervention

.5. Identity, Access & Secrets Management

• Implement and govern IAM standards across cloud environments
• .Build least-privilege, zero-trust access frameworks
• .Maintain secure secrets management via Vault, KMS, or similar tooling

.6. Disaster Recovery & Business Continuity

• Lead DR planning and execution with clear RTO/RPO targets

OK

• RsAchieve 99.9% secure and compliant uptime for all cloud infrastructur
• e.Reduce high-risk vulnerabilities by 90% within the first 6 month
• s.Implement full Cloud Security Monitoring & Alerting within 90 day
• s.Shift-left security across CI/CD pipelines with 100% automated check
• s.Reduce mean time to detect (MTTD) and mean time to respond (MTTR) for security incidents by 50

Requirements

• ion:Required: Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equival
• ent.Preferred: Master’s degree in Cybersecurity or Cloud Secur

Experience

• nce:5–9 years in cloud engineering or cloud security ro
• les.Proven hands-on experience securing cloud platforms AWS at sc
• ale.Experience in regulated or compliance-heavy environments (fintech, banking, regtech) prefer

Technical Expertise

• se: Strong understanding of cloud security frameworks (CIS, NIST, PCI-D
• SS).Expertise with IaC tools: Terraform, CloudFormat
• ion.Hands-on experience with Kubernetes security (E
• KS).Ability to detect, triage and prevent network-level vulnerabilities and misconfigurations in the cloud infrastruct
• ure.Hands-on with container security (Docker, Kubernetes, EKS/G
• KE).Experience with cloud-native security tools (GuardDuty, Security Hub, GCP SCC, Prisma, Wiz, et
• c.).Strong knowledge of monitoring & logging stacks (ELK, Prometheus, Grafa
• na).Proficiency in Python, Go, or Java for security automat