Senior Cloud Security

Sourcebae; Mumbai; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Sourcebae is seeking a Senior Cloud Security Architect to design and govern our AWS cloud security, integrating CSPM, CNAPP, and enterprise tools into a unified Zero-Trust SOC framework.

The role focuses on multi-account AWS security, vulnerability management, and secure CI/CD automation, aligning guardrails with IaC and WAF/NGFW strategies. Strong AWS security certifications are required.

Qualifications

• 8+ years in Cybersecurity, with 5+ years specifically architecting security for enterprise-scale AWS environments.
• Must-have certifications: AWS Certified Security – Specialty; AWS Certified Solutions Architect – Professional.
• Desirable: CISSP, CCSP, or related credentials.

Responsibilities

• AWS Native Security: Design multi-account architectures using AWS Organizations, SCPs, IAM Identity Center, and Security Hub; enforce guardrails with GuardDuty, Inspector, Macie, KMS, CloudTrail, Config, AWS WAF, and Network Firewall.
• CSPM & CNAPP Governance: Operationalize enterprise CSPM tools (Wiz, Orca, Prisma Cloud) for continuous posture monitoring, compliance tracking, and drift remediation across AWS workloads.
• Vulnerability Assessment & Patch Management: Automate vulnerability management and patch orchestration across EC2 and hybrid workloads using AWS Systems Manager and tools like Qualys, Tenable, or Rapid7.
• Endpoint Protection & SOC Integration: Deploy enterprise EDR/AV solutions (CrowdStrike, SentinelOne) and stream telemetry to SIEM/XDR platforms (Splunk, Microsoft Sentinel).
• DevSecOps & Automation: Codify security guardrails using IaC (Terraform, CloudFormation) and embed security testing (Checkov, tfsec) into CI/CD pipelines.

Skills

Cloud Security

Security Architecture

Zero Trust

SOC Integration

DevSecOps

Automation

Tools

Terraform

CloudFormation

Checkov

tfsec

Qualys

Tenable

Rapid7

CrowdStrike

Job description

We are hiring a Senior Cloud Security Architect to design, secure, and govern our enterprise AWS cloud infrastructure. You will bridge AWS-native security services with enterprise third-party platforms (CSPM, NGFW, WAF, Container Security, EDR, Patch Management, and VA tools) to build a multi-layered, Zero-Trust defense integrated directly into our Security Operations Center (SOC).

Key Responsibilities

• AWS Native Security: Design multi-account architectures using AWS Organizations, SCPs, IAM Identity Center, and Security Hub. Enforce guardrails with GuardDuty, Inspector, Macie, KMS, CloudTrail, Config, AWS WAF, and Network Firewall.
• CSPM & CNAPP Governance: Operationalize enterprise CSPM tools (Wiz, Orca, Prisma Cloud) for continuous posture monitoring, compliance tracking, and drift remediation across AWS workloads.
• Vulnerability Assessment & Patch Management: Automate vulnerability management and patch orchestration across EC2 and hybrid workloads using AWS Systems Manager alongside tools like Qualys, Tenable, or Rapid7.
• Endpoint Protection & SOC Integration: Deploy enterprise EDR/AV solutions (CrowdStrike, SentinelOne) and stream telemetry (VPC Flow Logs, GuardDuty, CloudTrail) to enterprise SIEM/XDR platforms (Splunk, Microsoft Sentinel).
• DevSecOps & Automation: Codify security guardrails using Infrastructure as Code (Terraform, CloudFormation) and embed security testing (Checkov, tfsec) directly into CI/CD pipelines.

Qualifications & Certifications

• Experience: 8+ years in Cybersecurity, with 5+ years specifically architecting security for enterprise-scale AWS environments.
• Certifications (Must have at least one):
• AWS Certified Security – Specialty
• AWS Certified Solutions Architect – Professional
• Desirable Certifications: CISSP, CCSP, or relevant credentials.