Cloud Security Engineer

Quin; Hyderabad; On-site; INR 1,000,000 - 1,500,000; Full time

Job summary

Quin, based in Hyderabad, is seeking a Technical Lead for Security Compliance to enhance our security posture. This role involves significant hands-on work in cloud security and implementing SOC 2 and ISO 27001 controls.

Ideal candidates will have 3–6 years in security engineering, a strong background in cloud technologies, and the ability to work independently in a small, fast-moving team.

Qualifications

• 3–6 years in security engineering, cloud security, or IT/infrastructure.
• Hands-on experience with cloud security on AWS, GCP or Azure.
• Working understanding of SOC 2 and/or ISO 27001 controls.

Responsibilities

• Ensure the security posture and documentation are clear and advertised.
• Lead the compliance engine and security monitoring efforts.
• Implement technical controls for SOC 2 and ISO 27001.

Skills

Cloud security on hyperscalers

Identity & access fundamentals

Security monitoring and incident response

Scripting/automating

Tools

AWS

Terraform

SIEM

Job description

About Quin

Quin is a safety-technology company. We embed sensor tech — crash detection, motion sensing, connectivity — into helmets and protective gear as an ingredient brand, shipping inside products from partners across motorcycling, cycling, sports, Industrial PPE and more. Quin products are designed to scale to millions of users, adopted by leading, global brands. Our engineering and product operations centre is in Hyderabad, where we are building our team and product with world-class excellence.

Why this role exists

This is the role focussed on ensuring our systems are secure and our security posture is not only well documented, but proudly advertised.

This role is a technical lead of our compliance engine.

What You'll Own

Corporate IT & identity

• Identity as the backbone: SSO, MFA, least-privilege access, and clean joiner/mover/leaver flows across all locations.
• SaaS administration and access governance across our tool estate.

Cloud & product security

• Harden our cloud environment (network, secrets, key management, logging, config baselines) as the portal scales to millions of users.
• Partner with engineering on secure SDLC: dependency and vulnerability management, security review of new services, and remediation tracking.

Endpoint & device

• MDM across the fleet, disk encryption, patch baselines, and a sane BYOD/company-device policy.

Security monitoring & incident response

• Centralised logging/alerting, a workable detection baseline, and an incident-response runbook.

Compliance evidence & controls

• Implement and operate the technical controls behind SOC 2 and ISO 27001, and own continuous evidence collection so audits are boring.
• Feed vendor/third-party security assessments.

Security awareness

• Lightweight, useful security training and phishing resilience for the team.

Must-haves

• 3–6 years in security engineering, cloud security, or IT/infrastructure with a strong security lean.
• Hands‑on cloud security on at least one hyperscaler (AWS, GCP or Azure): IAM, networking, secrets/key management, logging, config hardening.
• Solid identity & access fundamentals (SSO/SAML/OIDC, MFA, RBAC) and endpoint management (MDM).
• Working understanding of SOC 2 and/or ISO 27001 controls — you've supplied evidence for an audit, or you can clearly show you know what one demands.
• Comfortable scripting/automating (Python/Bash) and reading infrastructure‑as‑code.
• Autonomous and pragmatic: you secure things without becoming the department of "no."

Strong pluses

• AWS Security Specialty, AZ-500, CCSP, CISSP, or ISO 27001 Lead Implementer.
• Infrastructure‑as‑code security (Terraform + Checkov/tfsec) and SIEM experience.
• Prior security work at a product SaaS with an enterprise buyer base.
• AI/LLM security exposure (prompt‑injection defence, model/endpoint hardening) — relevant as we run ML on motion data.
• Having stood something up from scratch in a small, scrappy team.

How We Work

Small team of doers. We hire people who move faster and go deep, not people who manage others to do the work. You'll have real ownership of security and IT posture and very little bureaucracy.