Lead Cloud Security Engineer

Sutherland Global; Hyderabad; On-site; INR 3,800,000 - 6,000,000; Full time

Job summary

Sutherland Global is seeking an experienced Lead Cloud Security Engineer with 10+ years in Information Security and 5+ years in Cloud Security to govern security controls across multi-clouds (Azure, OCI, AWS, GCP). The role focuses on architecture, compliance, operations, threat management, and continuous improvement of cloud security posture.

Key responsibilities include designing secure cloud landing zones, CSPM program leadership, threat modeling, incident response, and audit readiness.

Qualifications

• Strong hands-on experience securing Azure, OCI, AWS and GCP environments.
• Expertise in IAM, cloud-native security services, CSPM, CWPP, SIEM, Zero Trust, and cloud security operations.
• Experience with threat modeling, security architecture reviews, incident response, vulnerability management, and compliance assessments.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC 2, PCI-DSS, and GDPR.
• Experience with cloud logging and security monitoring platforms.

Responsibilities

• Design and govern secure, scalable cloud architectures, security standards, policies, guardrails, and landing zones across multi-cloud environments.
• Own and enhance the Cloud Security Posture Management (CSPM) program, ensuring alignment with NIST, ISO 27001, CIS Benchmarks, SOC 2, PCI-DSS, GDPR, and CSA frameworks.
• Perform threat modeling, security architecture reviews, risk assessments, and defining remediation strategies.
• Implement and manage cloud security controls including IAM, MFA, PAM, SSO, Zero Trust, CSPM, and CWPP.
• Monitor cloud environments for threats, vulnerabilities, and misconfigurations, drive remediation with platform and application teams.
• Investigate and respond to cloud security incidents, support forensic investigations, and integrate cloud logs into SIEM platforms.
• Detect, investigate, and respond to cloud-based security incidents.
• Analyze logs from Defender for Cloud, OCI Cloud Guard, AWS CloudTrail, Azure Monitor, and GCP Logging.
• Support vulnerability management, EDR, XDR and security monitoring solutions.
• Ensure audit readiness, compliance reporting, and maintenance of cloud security documentation and procedures.
• Provide technical leadership, mentor security engineers, and collaborate with stakeholders to strengthen cloud security capabilities.

Skills

Azure security

OCI security

AWS security

GCP security

IAM

CWPP

SIEM

Zero Trust

Threat modeling

Incident response

Leadership

Communication

Tools

Tenable

SentinelOne

Defender for Cloud

OCI Cloud Guard

Azure Monitor

CloudTrail

Job description

Company Description:

Sutherland is an experience-led digital transformation company. Our mission is to deliver exceptionally engineered experiences for customers and employees today, that continue to delight tomorrow. For over 37 years, we have cared for our clients' customers, delivering measurable results and accelerating growth.

Job Description:

Position Summary

We are seeking an experienced Lead Cloud Security Engineer with 10+ years of experience in Information Security and at least 5+ years in Cloud Security implementation, and governance of security controls across multi-cloud environments (Azure, OCI, AWS, GCP). The role focuses on cloud security architecture, compliance, security operations, threat management, and continuous improvement of the organization's cloud security posture.

Key Responsibilities

• Design and govern secure, scalable cloud architectures, security standards, policies, guardrails, and landing zones across multi-cloud environments.
• Own and enhance the Cloud Security Posture Management (CSPM) program, ensuring alignment with NIST, ISO 27001, CIS Benchmarks, SOC 2, PCI-DSS, GDPR, and Cloud Security Alliance frameworks.
• Perform threat modeling, security architecture reviews, risk assessments, and defining remediation strategies.
• Implement and manage cloud security controls including IAM, MFA, PAM, SSO, Zero Trust, CSPM, and Cloud Workload Protection (CWPP).
• Monitor cloud environments for threats, vulnerabilities, and misconfigurations, drive remediation with platform and application teams.
• Investigate and respond to cloud security incidents, support forensic investigations, and integrate cloud logs into SIEM platforms.
• Detect, investigate, and respond to cloud-based security incidents.
• Analyze logs from cloud-native services such as Defender for Cloud, OCI Cloud Guard, AWS CloudTrail, Azure Monitor, and GCP Logging.
• Support vulnerability management (Tannable), EDR (Sentinel One), Stellar XDR and Cyber AI Behavior Analytics , Defender for Office 365 email security monitoring solutions.
• Ensure audit readiness, compliance reporting, and maintenance of cloud security documentation, standards, and procedures.
• Provide technical leadership, mentor security engineers, and collaborate with business and technology stakeholders to strengthen cloud security capabilities.

Required Skills & Experience

• Strong hands-on experience securing Azure, OCI, and AWS and GCP environments.
• Expertise in IAM, cloud-native security services, CSPM, CWPP, SIEM, Zero Trust, and cloud security operations.
• Experience with threat modeling, security architecture reviews, incident response, vulnerability management, and compliance assessments.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC 2, PCI-DSS, and GDPR.
• Experience with Tenable, SentinelOne, cloud logging, and security monitoring platforms.
• Strong communication, stakeholder management, and leadership skills.

Qualifications:

Position Summary

We are seeking an experienced Lead Cloud Security Engineer with 10+ years of experience in Information Security and at least 5+ years in Cloud Security implementation, and governance of security controls across multi-cloud environments (Azure, OCI, AWS, GCP). The role focuses on cloud security architecture, compliance, security operations, threat management, and continuous improvement of the organization's cloud security posture.

Key Responsibilities

• Design and govern secure, scalable cloud architectures, security standards, policies, guardrails, and landing zones across multi-cloud environments.
• Own and enhance the Cloud Security Posture Management (CSPM) program, ensuring alignment with NIST, ISO 27001, CIS Benchmarks, SOC 2, PCI-DSS, GDPR, and Cloud Security Alliance frameworks.
• Perform threat modeling, security architecture reviews, risk assessments, and defining remediation strategies.
• Implement and manage cloud security controls including IAM, MFA, PAM, SSO, Zero Trust, CSPM, and Cloud Workload Protection (CWPP).
• Monitor cloud environments for threats, vulnerabilities, and misconfigurations, drive remediation with platform and application teams.
• Investigate and respond to cloud security incidents, support forensic investigations, and integrate cloud logs into SIEM platforms.
• Detect, investigate, and respond to cloud-based security incidents.
• Analyze logs from cloud-native services such as Defender for Cloud, OCI Cloud Guard, AWS CloudTrail, Azure Monitor, and GCP Logging.
• Support vulnerability management (Tannable), EDR (Sentinel One), Stellar XDR and Cyber AI Behavior Analytics , Defender for Office 365 email security monitoring solutions.
• Ensure audit readiness, compliance reporting, and maintenance of cloud security documentation, standards, and procedures.
• Provide technical leadership, mentor security engineers, and collaborate with business and technology stakeholders to strengthen cloud security capabilities.

Required Skills & Experience

• Strong hands-on experience securing Azure, OCI, and AWS and GCP environments.
• Expertise in IAM, cloud-native security services, CSPM, CWPP, SIEM, Zero Trust, and cloud security operations.
• Experience with threat modeling, security architecture reviews, incident response, vulnerability management, and compliance assessments.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC 2, PCI-DSS, and GDPR.
• Experience with Tenable, SentinelOne, cloud logging, and security monitoring platforms.
• Strong communication, stakeholder management, and leadership skills.

Additional Information:

All your information will be kept confidential according to EEO guidelines.