Lead/ Architect Security - DevSecOps

Cloudsufi; India; Remote; INR 900,000 - 1,300,000; Full time

Job summary

CLOUDSUFI is a security-focused data engineering and cloud technologies firm actively seeking an experienced security engineer for a remote role based in India. The candidate will collaborate with vendors and internal teams to strengthen cloud security and CI/CD processes.

The role requires 8–14 years of relevant experience, deep AWS security know-how, and hands-on IaC expertise (Terraform/CloudFormation). Occasional travel to Noida may be expected.

Qualifications

• 8–14 years of relevant experience in cloud security and data protection.
• Strong AWS security expertise with hands-on tooling and inspections.
• Experience with PCI, SOC2, SOX, HIPAA or similar compliance regimes.
• Infrastructure as Code expertise (Ansible / Terraform / CloudFormation).
• Hands-on security tooling within CI/CD pipelines and software delivery.

Responsibilities

• Work with vendors to implement and remediate security gaps independently.
• Manage incidents, collect evidence, and drive remediation timelines.
• Integrate vendor platforms into CI/CD pipelines and secure deployments.
• Fine-tune WAF rules to align with application needs and threat models.
• Promote and enforce DevSecOps practices across teams.

Skills

AWS

Terraform

CloudWatch

GuardDuty

WAF

CloudFlare

DataDog

PagerDuty

SOPHOS

PCI Compliance

SOC2

SOX

HIPAA

Ansible

CloudFormation

CI/CD Security

Penetration Testing

Container Security

Threat Assessment

Job description

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role

Full-Time Individual Contributor (IC)

Reporting to

Solution Architect / Program Manager

Location

India Remote (Quarterly visits to Noida office)

Shift

2PM-11PM IST

12x5 (On call duty)

Experience

8-14 Years

About You

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

About The Role

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers

Skills

Network Security, WAF, SAST, DAST, Application Security, Cloud Security and GRC