Platform Security Engineer

Promaynov Advisory Services Pvt. Ltd; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Promaynov Advisory Services Pvt. Ltd invites a Senior Engineer to join the Platform Security team, focusing on secure cloud architectures and governance.

You will guide engineers on secure-by-default patterns, lead onboarding of new services, and drive policy, IAM, and threat detection across cloud platforms.

This role demands hands-on DevSecOps expertise, IaC review, and collaboration with product, SRE, and platform teams to raise engineering standards.

Qualifications

• Hands-on cloud security engineering experience and DevSecOps practices.
• Experience with IaC assessment, policy-as-code, and scanning tools.
• Knowledge of secure architecture patterns for networking and workloads.
• CI/CD integration including IaC scanning and code signing.

Responsibilities

• Provide guidance to engineers on secure cloud configurations and guardrails.
• Lead security onboarding for new services.
• Develop security policies, baseline configurations, and governance controls.
• Manage RBAC, privileged access, and workload identities.
• Oversee automated policy checks and compliance monitoring.
• Embed security scanning, image validation, and code signing into CI/CD.
• Create DevSecOps templates for pipelines and signing steps.
• Lead Terraform module reviews for secure configurations.
• Contribute to secure architecture patterns for networking and identity.
• Enhance detections and response playbooks for cloud threats.
• Participate in incident response and containment.
• Build automation for access reviews and remediation workflows.
• Engage with product, SRE, and platform teams to embed security early.
• Deliver training and best-practice documentation.
• Manage stakeholder relationships and champion secure-by-default culture.
• Shift work and on-call participation.

Skills

Cloud security

DevSecOps

IaC assessment

Policy-as-code

Scanning tools

Secure architecture

CI/CD pipelines

Azure DevOps

PowerShell

Python

Bash

Threat detection

Incident response

Communication skills

Ownership mindset

Job description

Cloud Engineering Role

Job Title

Senior Engineer

Team

Platform Security

Service Line Information

Technology services the broader Firm through delivery of core technology and managed services capabilities, collaboration and innovation development services and building our Alliances network.

Job Description

The Team

Key Responsibilities

Technical Leadership

• Provide guidance to engineers on secure cloud configurations, secret management, identity governance, and platform guardrails.
• Lead security onboarding for new services, ensuring alignment with secure‑by‑default patterns.

Policy, Governance & Access Control

• Develop and refine security policies, baseline configurations, and platform governance controls.
• Manage and review access control models including RBAC, privileged access, automation identities, and workload identities.
• Oversee automated policy checks and compliance monitoring.

DevSecOps & SDLC Security

• Embed security scanning, image validation, dependency checks, IaC scanning, and code signing into CI/CD workflows.
• Create reusable DevSecOps templates for teams to adopt (pipeline templates, scanning configs, signing steps).

IaC Review & Secure Architecture

• Lead reviews of Terraform modules to ensure secure configurations and alignment with guardrails.
• Contribute to secure architecture patterns for networking, identity, and workload isolation.

Threat Detection, IR & Automation

• Enhance detections, rule sets, and response playbooks for cloud threat intelligence signals.
• Participate in incident response activities, supporting containment and root cause analysis.
• Build automation to support access reviews, remediation workflows, and compliance reporting.

Stakeholder Engagement & Enablement

• Work closely with product, observability, SRE, and platform engineering teams to embed security early in design.
• Deliver training, guidance, and best‑practice documentation.
• Manage relationships with stakeholders to become a trusted partner.
• Lead by example by living by Our Values and embracing our culture

Shift Responsibilities & Operational Support

• Work in rotational shifts as required.
• Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.

The Person

• Strong hands‑on experience in cloud security engineering and DevSecOps.
• Skilled in IaC assessment, policy‑as‑code, scanning tools, and secure architecture.
• Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent.
• Proficient in scripting/automation languages (PowerShell, Python, Bash).
• Familiar with threat detection, cloud forensics, and incident response processes.
• Effective communicator able to influence engineering teams to adopt secure‑by‑default practices.
• Strong sense of ownership and problem‑solving abilities and commitment to raising engineering standards.