Senior Cloud Security Engineer

Kissht; Mumbai; Presencial; INR 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

Kissht, a leading fintech company based in Mumbai, seeks a senior AWS security engineer to manage multi-account security, automate detection and remediation with Claude Code, and support audits and incident response across the InfoSec function.

You will work across IAM, VPC, KMS, WAF and API protections, collaborating with DevOps and engineering to harden exposure and prevent fraud in payments and fund transfers.

Formación

• 4+ years hands-on AWS security.
• Strong grasp of AWS IAM, networking and logging.
• Hands-on Claude Code / Claude automation experience (be ready to demo something you built).

Responsabilidades

• Own AWS security posture across accounts (IAM, SCPs, KMS, VPC, GuardDuty, Security Hub, CloudTrail).
• Triage CSPM findings (Orca) and drive remediation with DevOps and engineering.
• Manage WAF rules, IP blocking and API gateway protections against abuse and attacks.
• Investigate cloud incidents: suspicious traffic, compromised services, exposed assets.
• Harden high-risk APIs (payments / fund transfers) against fraud and abuse.
• Run attack surface reviews and support VAPT / red-team remediation.
• Build automated detection, remediation and reporting using Claude Code.
• Support audits, partner due diligence and other InfoSec work as needed.

Conocimientos

AWS security

IAM

Networking

Logging

Claude Code

Automation

Orca CSPM

WAF

API security

Terraform exposure

Herramientas

Claude Code

Orca

Terraform

Kubernetes (EKS)

WAF

Descripción del empleo

Core AWS and cloud security across multi-account AWS environments, covering posture, detection, hardening and response. This is a high-intensity role that works across the full InfoSec function, not just cloud.

What You'll Do:

• Own AWS security posture across accounts (IAM, SCPs, KMS, VPC, GuardDuty, Security Hub, CloudTrail)
• Triage CSPM findings (Orca) and drive remediation with DevOps and engineering
• Manage WAF rules, IP blocking and API gateway protections against abuse and attacks
• Investigate cloud incidents: suspicious traffic, compromised services, exposed assets
• Harden high-risk APIs (payments / fund transfers) against fraud and abuse
• Run attack surface reviews and support VAPT / red-team remediation
• Build automated detection, remediation and reporting using Claude Code
• Support audits, partner due diligence and other InfoSec work as needed

What We're Looking For:

• 4+ years hands-on AWS security
• Strong grasp of AWS IAM, networking and logging
• Hands-on Claude Code / Claude automation experience (be ready to demo something you built)

Good to Have

• AWS Security – Specialty
• Scripting (Python / Bash)
• Kubernetes (EKS) and Terraform exposure

About Kissht

Kissht is India's leading listed fintech companies, offering fast, personalized digital credit through its mobile app to customers across the country. Founded in 2016 by IIT/IIM alumni Ranvir Singh and Krishnan Vishwanathan, both former McKinsey consultants, Kissht was listed on the NSE and BSE in May 2026.

Kissht serves 74.6 million registered users and 12.25 million customers, with assets under management (AUM) of approximately ₹8,000 crore. Its growth is powered by proprietary AI/ML-based underwriting, a robust in-house technology stack, and a pan-India collections network.

Headquartered in Mumbai and backed by marquee investors, including the Brunei Investment Authority, Vertex Growth Fund, and the Government of Singapore, Kissht is now scaling as a public company and is looking for driven, entrepreneurial talent to join its next phase of growth.