cloud security engineer

Infocredit Services; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Infocredit Services in Bengaluru, India seeks a Cloud Security Engineer to strengthen cloud, infrastructure, and data security across AWS-based systems. You will identify issues, work with stakeholders on mitigations, and implement secure design patterns.

The role emphasizes CSPM and workload protection, threat modeling, and automation of security tooling. A proactive, collaborative engineer with 2–6 years of security experience will thrive in this environment.

Qualifications

• 2-6 years of experience in information security.
• Strong fundamentals in networks, Linux OS, and containers.
• Experience with secure cloud architecture.
• Proven ability to build and automate security tooling.
• Experience in threat modeling and risk-based decisions.
• Proactive in staying updated on threats and research.

Responsibilities

• Work across a diverse information security domain with a focus on cloud, infra, and data security.
• Identify security issues (internal and external); mitigate with stakeholders and design/implement solutions in AWS-based systems.
• Own and improve the CSPM program aligned with standards like NIST 800-53 and ISO 27001.
• Own the cloud workload protection program, including alert investigation and triage.
• Drive the data security charter: classification, masking, and securing large-scale data stores.
• Automate infrastructure security and build tooling to reduce manual effort.
• Conduct security design, infrastructure, and architecture reviews.
• Build, operate, and maintain cloud security platforms for prevention, detection, response.
• Translate product requirements into threat models and security risks.

Skills

Info sec fundamentals

Python

Cloud security

Vulnerability mgmt

CI/CD security

Stakeholder comms

Job description

• work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security
• identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in aws-based systems
• own and continuously improve the cloud security posture management (cspm) program aligned with standards like nist 800-53 and iso 27001
• own the cloud workload protection program, including alert investigation and triage
• drive the data security charter, including data classification, masking, and securing large-scale data stores
• automate infrastructure security and build security tooling to reduce manual effort
• conduct security design, infrastructure, and architecture reviews
• build, operate, and maintain cloud security platforms to enhance prevention, detection, and response
• translate product requirements into threat models and identify security risks
• build in-house security frameworks to strengthen security culture across tech teams
• enable compliance across teams (pci dss, iso 27001, dpdpa) and promote best practices
• drive security awareness and engineering maturity across the organisation

• 2-6 years of experience in information security Solid fundamentals on computer networks, operating systems (linux), containers and secure cloud architecture
• strong programming skills in python, go, or bash
• solid understanding of cloud security with hands-on experience in aws / gcp / azure
• experience building and automating custom security tools
• understanding of microservices, ci/cd pipelines, containers, and securing containerised workloads
• strong grasp of core security principles like least privilege, defence-in-depth, and zero trust
• a data-driven mindset with the ability to influence stakeholders
• security projects on github or technical blogs
• strong communication skills and the ability to be a go-to security partner for engineers and product teams
• a proactive approach to staying updated on security threats, breaches, tools, and research
• basic understanding of llms, mcp, and ai agents and Interest in building ai-driven security workflows.
• familiarity with vulnerability management, patching cycles, and cvss