Principal Product Security Engineer, Cloud Security

Jobgether; India; Hybrid; INR 4,000,000 - 9,000,000; Full time

Benefits offered by this job

Remote-friendly

Health and wellbeing resources

Volunteer days

Professional development

Inclusive international team

Job summary

Jobgether, on behalf of a partner company, seeks a Principal Product Security Engineer, Cloud Security based in India to define the security vision for cloud platforms and drive architecture across AWS, GCP, and Azure. You will lead threat modeling, build automated controls for CI/CD and IaC, and mentor senior engineers while collaborating with executives to align security with business goals.

The role emphasizes secure-by-default patterns, CSPM, and ongoing risk management in enterprise SaaS

Qualifications

• 10+ years in security engineering with cloud security specialization.
• Proven principal engineer or technical authority experience.
• Hands-on multi-cloud (AWS/GCP/Azure) and containers (Docker/Kubernetes).
• Experience with secure microservices, IaC, and automated security tooling.
• Strong communication and stakeholder management skills.

Responsibilities

• Define and drive cloud security architecture across AWS, GCP, Azure.
• Lead threat modeling and security assessments for complex systems.
• Design automated security controls integrated into CI/CD and IaC.
• Champion CSPM, continuous compliance, and security baselines.
• Mentor engineers and collaborate with exec stakeholders.
• Guide incident responses and long‑term remediation strategies.
• Lead security initiatives during monolith-to-microservices migrations.

Skills

Cloud security

Security architecture

Threat modeling

Automation

Leadership

Mentoring

Stakeholder management

Zero Trust

Encryption

Programming (Python/Go/Java/JS)

Education

Bachelor's or Master's in CS/Info Security

Tools

Docker

Kubernetes

Service Mesh

Terraform

CI/CD security

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Product Security Engineer, Cloud Security based in India.

As a Principal Product Security Engineer, Cloud Security, you will define and drive the technical vision for cloud security across large-scale, globally distributed SaaS platforms. You will lead strategic security architecture initiatives, establishing secure‑by‑default standards and scalable protection mechanisms across multi‑cloud environments. Working closely with engineering leaders, platform architects, and security teams, you will help identify and mitigate complex security risks while strengthening infrastructure resilience. You will play a key role in embedding automated security controls into development workflows, improving cloud security posture, and ensuring compliance across highly regulated environments. This position combines hands‑on technical expertise with strategic leadership, offering the opportunity to influence engineering practices at an enterprise scale. You will also mentor senior engineers and champion a collaborative culture focused on innovation, reliability, and security excellence.

Accountabilities

• Define and drive the overall cloud security architecture across AWS, GCP, and Azure environments, establishing secure‑by‑default standards, architectural patterns, and scalable security guardrails.
• Lead advanced threat modeling exercises and in-depth security assessments across complex systems, distributed microservices, and highly regulated cloud environments.
• Design and implement automated security controls, detection mechanisms, and self‑healing guardrails integrated into CI/CD pipelines and Infrastructure as Code (IaC).
• Establish the technical strategy for Cloud Security Posture Management (CSPM), continuous compliance, security baselines, and risk monitoring.
• Develop reusable security frameworks, engineering guidelines, and operational standards to improve security, resilience, and reliability across products and platforms.
• Provide technical leadership, mentorship, and guidance to security and software engineers, promoting security awareness and engineering best practices.
• Act as a principal technical advisor during high‑severity security incidents, supporting root‑cause investigations and defining long‑term architectural remediation strategies.
• Collaborate with executive stakeholders, principal architects, and engineering leaders to translate complex security challenges into actionable strategic priorities.
• Lead security initiatives across architectural transformations, including monolith‑to‑microservices migrations and the evolution of cloud‑native platforms.
• Champion developer experience while ensuring robust security practices are embedded throughout the software development lifecycle.

Requirements

• 10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high‑growth SaaS organizations.
• Proven experience serving as a principal engineer or technical authority, leading large‑scale security architecture initiatives, risk mitigation programs, and threat modeling activities.
• Strong hands‑on expertise in multi‑cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.
• Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP‑compliant cloud offerings.
• Demonstrated experience leading architectural transformations, including securing microservices architectures and large‑scale distributed systems.
• Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and and internal tooling.
• Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security controls, and CI/CD security integrations.
• Deep understanding of cloud security architecture, Zero Trust principles, tenant data isolation, encryption, cryptographic systems, and multi‑tenant SaaS environments.
• Experience with cloud detection engineering, distributed telemetry and logging, IAM graph analysis, least‑privilege automation, and enterprise alert optimization.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical discipline, or equivalent practical experience.
• Exceptional technical leadership, communication, and stakeholder management skills, with the ability to influence executive leadership and cross‑functional engineering teams.
• Proven ability to mentor senior engineers, encourage collaboration, and promote an inclusive engineering culture.
• Strong ownership mindset, proactive problem‑solving abilities, and a passion for improving security through automation and continuous innovation.

Additional advantages

• Experience developing internal software platforms or developer tools that automate security and compliance workflows.
• Contributions to open‑source security projects, discovery and disclosure of CVEs, or active involvement in security frameworks.
• Experience presenting at recognized cybersecurity conferences or publishing security research.
• Advanced expertise in securing serverless architectures, service meshes, and large‑scale Kubernetes environments.
• Experience designing security controls for regulated cloud environments, including sovereign, isolated, and FedRAMP offerings.

Benefits

• Flexible working arrangements, with the freedom to work remotely or from an office where available.
• Distributed‑first working environment with virtual interviews and onboarding.
• Health and wellbeing resources to support employees and their families.
• Paid volunteer days and opportunities to contribute to local communities.
• Access to a collaborative and inclusive international working environment.
• Opportunities to influence large‑scale security initiatives and work with advanced cloud technologies.
• Professional development through collaboration with experienced engineering and security leaders.
• A culture that values autonomy, innovation, continuous learning, and individual contributions.