Cloud Security Engineer

Virtusa; Hyderabad; Presencial; INR 3.500.000 - 5.500.000; Jornada completa

Descripción de la vacante

Virtusa in Hyderabad seeks an experienced cybersecurity professional to lead cloud security strategy and governance. You will architect guardrails, define IAM and data protection controls, and ensure compliance with SAMA/NCA/ISO 27001/PCI DSS.

Join a team owning security across cloud services, CI/CD security, and audit readiness, driving zero-trust approaches and secure SDLC practices in a banking-regulated landscape.

Formación

• 7+ years in cybersecurity with 3+ years hands-on securing public cloud (OCI/GCP).
• IAM/SSO/PAM, KMS/HSM, certificates/PKI, and key rotation.
• CSPM/CNAPP/CWPP/CIEM and native cloud controls (GCP SCC, OCI Cloud Guard/WAF).
• Containers/Kubernetes security: admission controls, image scanning, runtime, network policies.
• DevSecOps tooling: Terraform, CI/CD integration, scripting in Python or PowerShell, solid SQL/regex for log analytics.
• Familiarity with banking/regulatory frameworks: SAMA Cybersecurity Framework, NCA ECC, ISO 27001, PCI DSS, SWIFT CSP.
• Excellent documentation and stakeholder skills.

Responsabilidades

• Own cloud security reference architectures and landing-zone guardrails (network, identity, data, logging).
• Secure configurations for managed DBs, storage, and serverless and all cloud services.
• Design least-privilege IAM (GCP/OCI IAM), SSO (SAML/OIDC), and PAM workflows.
• Implement key/credential lifecycle, MFA, short-lived tokens, and machine identity governance.
• Assure data encryption at rest/in transit, tokenization where needed.
• Define segmentation, private connectivity, WAF/DDoS/Bot protections, API security, and secure egress controls.
• Manage zero-trust access patterns for admins and services.
• Integrate SAST/DAST/Secrets/IaC scanning into CI/CD.
• Maintain control evidence for audits (SAMA/NCA/ISO/PCI).
• Build automated policies-as-code, tagging standards, and exception workflows.
• Integrate cloud logs with SIEM (Splunk).
• Orchestrate scanning of cloud assets and containers, track SLAs, coordinate remediation with platform/service teams.

Conocimientos

Cybersecurity experience

IAM/SSO/PAM

KMS/HSM

Certificates/PKI

CSPM/CNAPP/CWPP/CIEM

GCP/OCI controls

Containers security (Kubernetes)

DevSecOps tooling

Banking/regulatory frameworks

Documentation & stakeholder skills

Herramientas

Terraform

Python

PowerShell

SQL

Descripción del empleo

Job Requirements

Experience: 7+ years

Required Skills

• 7+ years in cybersecurity with 3+ years hands‑on securing public cloud (at least OCI/ GCP).
• Proven experience with IAM/SSO/PAM, KMS/HSM, certificates/PKI, and key rotation.
• Practical knowledge of CSPM/CNAPP/CWPP/CIEM and native cloud controls (e.g., GCP SCC, OCI Cloud Guard/WAF).
• Containers/Kubernetes security (admission controls, image scanning, runtime, network policies).
• DevSecOps tooling: Terraform, CI/CD integration, scripting in Python or PowerShell, solid SQL/regex for log analytics.
• Familiarity with banking/regulatory frameworks: SAMA Cybersecurity Framework, NCA ECC, ISO 27001, PCI DSS, SWIFT CSP.
• Excellent documentation and stakeholder skills.

Key Responsibilities

• Own cloud security reference architectures and landing‑zone guardrails (network, identity, data, logging).
• Secure configurations for managed DBs, storage, and serverless and all cloud services.
• Design least‑privilege IAM (GCP/OCI IAM), SSO (SAML/OIDC), and PAM workflows.
• Implement key/credential lifecycle, MFA, short‑lived tokens, and machine identity governance.
• Assure data encryption at rest/in transit, tokenization where needed.
• Define segmentation, private connectivity, WAF/DDoS/Bot protections, API security, and secure egress controls.
• Manage zero‑trust access patterns for admins and services.
• Integrate SAST/DAST/Secrets/IaC scanning into CI/CD.
• Maintain control evidence for audits (SAMA/NCA/ISO/PCI).
• Build automated policies‑as‑code, tagging standards, and exception workflows.
• Integrate cloud logs with SIEM (Splunk).
• Orchestrate scanning of cloud assets and containers, track SLAs, coordinate remediation with platform/service teams.

Work Experience

2-5Years