Cloud security Engineer/Developer and Devsecops

Cloudxtreme; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Cloudxtreme is seeking a security engineer to design and implement controls across applications and cloud environments from development to production. You will build robust defenses and drive security maturity across teams.

You will conduct threat modeling, secure code reviews, and vulnerability assessments for web and cloud-native apps. IAM, encryption, and zero-trust principles will be central to your work.

Responsibilities

• Design and implement security controls for applications and cloud environments across development and production stages.
• 2. Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• 3. Implement identity and access management, encryption, and key management practices in cloud environments.
• 4. Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• 5. Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• 6. Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• 7. Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• 8. Implement Zero Trust and least privilege principles for application and infrastructure access.
• 9. Provide guidance on secure application architecture, container security, and data protection strategies.
• 10. Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.

Job description

Role & responsibilities

• Design and implement security controls for applications and cloud environments across development and production stages.
• 2. Conduct threat modeling, secure code review, and vulnerability assessments for web and cloud-native applications.
• 3. Implement identity and access management, encryption, and key management practices in cloud environments.
• 4. Collaborate with DevOps teams to integrate security into CI/CD pipelines and automate security testing.
• 5. Monitor cloud configurations and posture using CSPM and CWPP tools to detect and remediate risks.
• 6. Enforce compliance with frameworks such as ISO 27001, NIST, and CIS Benchmarks in application and cloud deployments.
• 7. Investigate and respond to security incidents involving applications, APIs, or cloud resources.
• 8. Implement Zero Trust and least privilege principles for application and infrastructure access.
• 9. Provide guidance on secure application architecture, container security, and data protection strategies.
• 10. Maintain documentation, dashboards, and metrics to report application and cloud security maturity to leadership.