Senior Cloud Security Engineer

eSec Forte; Dadri; On-site; INR 2,800,000 - 4,000,000; Full time

Benefits offered by this job

Health insurance for employee & depend

Security-certification reimbursement

Annual learning and skill-development

Sponsored conference/training

Flexible work arrangements

Job summary

eSec Forte is seeking a Senior Cloud Security Engineer in Noida to own cloud security engagements from design to incident response. You will secure OpenShift, Kubernetes, and GCP, deploy CNAPP platforms Wiz and Cortex Cloud, and drive security into the DevSecOps pipeline with IaC scanning and SAST/DAST.

You will lead security hardening, perform posture assessments, and collaborate with development teams to implement secure coding practices and cloud security patterns.

Qualifications

• 4–6 years of demonstrated experience in cloud security engineering.
• B.Tech/M.Tech or BCA/MCA in Computer Science, IT, or a related field.
• Proven expertise in securing OpenShift, Kubernetes, and Google Cloud Platform (GCP).
• Experience with CNAPP platforms such as Wiz and Cortex Cloud.
• Solid understanding of cloud networking, IAM, data security, and compliance in GCP.

Responsibilities

• Design, implement, and manage security controls & architectures in GCP environments.
• Architect, deploy, and operate CNAPPs like Wiz and Cortex Cloud for visibility and remediation.
• Lead security hardening of containerized apps and orchestration platforms (OpenShift, Kubernetes).
• Conduct cloud security posture assessments and vulnerability analyses with remediation guidance.
• Integrate security into DevSecOps with IaC scanning, SAST/DAST, and automated testing.
• Oversee incident response for cloud security incidents and forensic analysis.
• Collaborate with development/ops teams to embed security by design and threat modeling.
• Develop security documentation, standards, and playbooks for cloud environments.

Skills

OpenShift

Kubernetes

GCP

Docker

AWS

CNAPP

Education

B.Tech/M.Tech or BCA/MCA

Tools

Wiz

Cortex Cloud

Checkmarx

Snyk

Burp Suite

Invicti

Job description

# Senior Cloud Security EngineerSecurity Engineering· Noida· 4–6 yrsJob ID: SE-2026-001Department: Security EngineeringLocation: NoidaExperience: 4–6 yrsEmployment: Full-time · On-siteQualification: B.Tech/M.Tech or BCA/MCAOpenings: 1Apply by: 30 Nov 2026Apply nowYou'll apply on the eSec Forte careers portal.## About the RoleThis role centers on the independent ownership of cloud security engineering engagements, from initial design and implementation to ongoing optimization and incident response. You will lead efforts to secure complex cloud-native environments, focusing on robust protection across development and production lifecycles and translating security findings into concrete pipeline and cloud-account changes.## Key Responsibilities* Design, implement, and manage comprehensive security controls and architectures within Google Cloud Platform (GCP) environments, covering network security, identity and access management (IAM), data protection, and secure configuration, ensuring alignment with security best practices and compliance requirements.* Architect, deploy, and operate Cloud-Native Application Protection Platforms (CNAPP) like Wiz and Cortex Cloud to gain deep visibility, identify, and remediate security risks across cloud workloads, configurations, and data assets, including misconfigurations and compliance violations.* Lead the security hardening of containerized applications and orchestration platforms, specifically OpenShift and Kubernetes, by implementing robust network policies, runtime security, image scanning, and fine-grained access controls.* Conduct in-depth cloud security posture assessments and vulnerability analyses, identifying potential attack vectors and misconfigurations, and delivering concrete, actionable recommendations for remediation and continuous improvement of the security baseline.* Drive the integration of security into the DevSecOps pipeline for cloud deployments, implementing Infrastructure as Code (IaC) scanning, static application security testing (SAST), dynamic application security testing (DAST), and automated security testing to prevent the introduction of vulnerabilities early in the development lifecycle.* Oversee and execute incident response procedures for cloud security incidents, including forensic analysis, threat hunting, malware analysis, and the implementation of containment, eradication, and recovery strategies to minimize impact.* Collaborate closely with development and operations teams to embed security by design, providing expert guidance on secure coding practices, threat modeling, and cloud security architecture patterns for new and existing applications.* Develop and maintain comprehensive security documentation, standards, and operational playbooks for cloud environments, ensuring consistent application of security policies and facilitating knowledge transfer across teams.## Requirements* 4-6 years of demonstrated experience in cloud security engineering, with a strong emphasis on independent ownership of deliverables and engagements.* B.Tech/M.Tech or BCA/MCA in Computer Science, Information Technology, or a related field.* Proven expertise in securing and managing environments built on OpenShift, Kubernetes, and Google Cloud Platform (GCP).* Demonstrated proficiency in implementing, configuring, maintaining, and operating Cloud-Native Application Protection Platforms (CNAPP) such as Wiz and Cortex Cloud, including designing solutions with these platforms.* Solid understanding of cloud networking, identity and access management (IAM), data security, and compliance frameworks within GCP.## Nice-to-Have* Experience with securing Docker containers and Amazon Web Services (AWS) cloud environments.* Familiarity with Infrastructure as Code (IaC) tools and practices for secure cloud deployments.* Experience with security tools for SAST, DAST, or SCA (e.g., Checkmarx, Snyk, Burp Suite, Invicti).* Understanding of digital forensics and incident response (DFIR) methodologies in cloud environments.## Benefits* Health insurance for the employee and dependents* Professional security-certification reimbursement (e.g., CCSP, GCP Professional Cloud Security Engineer)* Annual learning and skill-development allowance* Sponsored conference / training attendance* Flexible work arrangements## Required skills* OpenShift* Kubernetes* GCP## Good to have* Docker* AWS