Cloud Security Engineer - Ahmedabad Location (WFO)

Stella Technologies; Ahmedabad District; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

One Park Financial is seeking a hands-on Senior Cloud Security Engineer to strengthen security across our AWS infrastructure and support daily cybersecurity operations.

You will implement AWS security controls, investigate cloud security events, correct misconfigurations and automate recurring checks. Collaborate with Infrastructure, DevOps, and Development to reduce risk and embed automated security into development workflows.

Qualifications

• 5+ years of cloud engineering, infra, or security with production AWS security experience.
• Strong understanding of IAM, least privilege, networking, logging, and credential management.
• Hands-on AWS security events investigation and remediation capabilities.
• Scripting in Python, Bash, or PowerShell; familiarity with Git and CI/CD workflows.
• Ability to work independently and communicate in professional English.

Responsibilities

• Secure AWS infrastructure by improving accounts, identities, networking, storage, and workloads.
• Implement preventive controls: least privilege, guardrails, encryption, and secrets management.
• Improve cloud monitoring with CloudTrail, GuardDuty, Security Hub, and related tools.
• Investigate and respond to cloud security incidents and credential misuse.
• Drive remediation by prioritizing vulnerabilities and coordinating fixes.
• Support development security with secret scanning and dependency checks in pipelines.
• Automate security checks and recurring configuration reviews.
• Provide early-shift coverage for security alerts and handoff to the Americas team.

Skills

AWS IAM

Least Privilege

Cloud Networking

Logging & Monitoring

Credential Management

Python

Bash

PowerShell

CI/CD

Git

English Communication

Independent Working

Tools

Okta

Microsoft Entra ID

Active Directory

Microsoft 365

Wazuh

Graylog

WithSecure

Job description

Senior Cloud Security Engineer AWS

Department: IT / Cybersecurity

Reports To: Director of IT Infrastructure

Location: India – On-Site

Role Summary

One Park Financial is seeking a hands-on Senior Cloud Security Engineer to strengthen security

across our AWS infrastructure and support daily cybersecurity operations.

Your primary focus will be implementing AWS security controls, investigating cloud security events,

correcting misconfigurations and excessive permissions, and automating recurring security checks.

As part of our Cybersecurity team, you will collaborate with Infrastructure, DevOps, and

Development to reduce risk and introduce automated security checks into existing development

workflows. This is an engineering role: we value the ability to implement improvements and verify

results—not simply identify and report issues.

Key Responsibilities

• Secure AWS infrastructure: Assess and improve security across AWS accounts, identities, networking, storage, and workloads. Address excessive permissions, exposed resources, insecure configurations, and credential-management risks.
• Implement preventive controls: Work with DevOps to strengthen least-privilege access, role-based authentication, account-level guardrails, encryption, and secrets management.
• Improve cloud monitoring: Configure and maintain security logging and detection capabilities using services such as CloudTrail, GuardDuty, Security Hub, and related AWS tools.
• Investigate and respond: Analyze suspicious activity, credential misuse, unauthorized changes, and cloud security incidents. Perform authorized containment actions and elevate critical events immediately.
• Drive remediation: Prioritize cloud vulnerabilities and security findings, coordinate fixes with technical owners, track outstanding risks, and validate completed remediation.
• Support development security: Partner with DevOps to introduce secret detection, dependency scanning, and other agreed security checks into repositories and CI/CD workflows. Help evaluate findings and define remediation requirements; DevOps retains ownership of pipeline implementation, and Development owns code fixes.
• Automate security checks: Build and maintain scripts or workflows for recurring configuration reviews, access checks, monitoring validation, and reporting.
• Provide early-shift coverage: Review the shared security alert queue, verify monitoring health, and investigate or elevate issues using established procedures. Maintain investigation records, runbooks, and remediation evidence, and deliver a clear daily handoff to the Americas team.

Required Qualifications

• 5+ years of combined experience in cloud engineering, infrastructure, cybersecurity, or related technical roles, including demonstrated responsibility for securing production AWS environments.
• Strong practical understanding of AWS IAM, least privilege, cloud networking, logging, infrastructure hardening, and credential management.
• Hands-on experience investigating AWS security events and implementing or coordinating corrective actions.
• Practical scripting ability in Python, Bash, or PowerShell. Expertise in all three is not required.
• Working familiarity with Git and CI/CD workflows, along with the ability to collaborate effectively with Infrastructure and DevOps teams.
• Strong troubleshooting, documentation, and professional English communication skills.
• Ability to work independently, prioritize risk, and make controlled, well-documented changes.

Preferred Qualifications

• Experience with multi-account AWS environments, AWS Organizations, Service Control Policies, and infrastructure as code.
• Experience introducing secret scanning, dependency scanning, or other automated security checks into development workflows.
• Familiarity with enterprise identity, endpoint protection, or monitoring platforms such as Okta, Microsoft Entra ID, Active Directory, Microsoft 365, Wazuh, Graylog, or WithSecure. Equivalent platform experience is welcome; expertise in every listed tool is not expected.
• AWS Certified Security – Specialty or another relevant AWS/security certification. Demonstrated hands-on capability is more important than certifications or familiarity with every product in our environment.