Senior Engineer - Cloud Security

Dish Network; Bengaluru; On-site; INR 2,500,000 - 5,000,000; Full time

Benefits offered by this job

Insurance and Wellbeing

Financial & Retiral Benefit Program

Mental Wellbeing

Employee Stock Purchase Program (ESPP)

Professional Development Reimbursement

Time Off

Team Outings

Job summary

DISH Network Technologies India Pvt. Ltd seeks an experienced AWS Senior Security Engineer to design, deploy, and maintain security controls across AWS infrastructure. You will focus on CSPM, IAM, AI-driven automation, and architectural security to protect workloads while enabling rapid business growth.

You will implement CSPM tools, establish baseline security across AWS services, and automate security workflows. Strong emphasis on least privilege, encryption, and secure CI/CD pipelines.

Qualifications

• 5+ years of cloud security engineering experience, AWS-focused.
• Experience implementing CSPM and IAM controls in multi-account AWS setups.
• Familiarity with CIEM and least-privilege principles.

Responsibilities

• Implement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub) for real-time visibility into misconfigurations and risk.
• Establish baseline security practices across AWS services to ensure defense-in-depth.
• Evaluate AI/ML capabilities to automate security workflows and incident response.
• Architect and audit IAM policies, SCPs, role hierarchies, and temporary credentials.
• Configure encryption at rest/in transit using KMS/Secrets Manager; secure VPCs.
• Monitor logs with CloudTrail, GuardDuty, Security Hub; build incident playbooks.
• Integrate security scanning into CI/CD; write IaC with Terraform or CloudFormation.
• Ensure multi-account operations meet SOC 2, ISO 27001, HIPAA, PCI-DSS.

Skills

CSPM platforms

AWS Security Hub

IAM policies

SCPs

Terraform

CloudFormation

Python

Boto3

AI/ML fundamentals

Tools

Terraform

CloudFormation

Python

Boto3

AWS CLI

Job description

What Success Looks Like (Objectives):

We are seeking a highly skilled AWS Senior Security Engineer to join our cloud security team. In this role, you will design, deploy, and maintain robust security controls across our Amazon Web Services (AWS) infrastructure. You will focus on Cloud Security Posture Management (CSPM), identity and access management, AI-driven automation and security implementation, and broad-spectrum architectural security across all core AWS services—ensuring our cloud workloads remain resilient against emerging threats while enabling rapid business growth.

Key Responsibilities

• Implement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub, etc) to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.
• Establish baseline security practices across the breadth of AWS services (Compute, Storage, Database, Serverless, Networking, Messaging, and Governance) to guarantee defense-in-depth across the entire AWS ecosystem.
• Evaluate, integrate, and operationalize AI/ML capabilities (e.g., AWS Bedrock, Amazon Q, SageMaker, LLM security practices) to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.
• Architect, enforce, and audit fine-grained IAM policies, Service Control Policies (SCPs), role hierarchies, and temporary credentials adhering strictly to the principle of least privilege and CIEM principles.
• Configure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager. Maintain secure VPC network architectures, security groups, Network ACLs, and AWS WAF configurations.
• Monitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config. Build automated incident response playbooks using EventBridge, Lambda, and SOAR tools to contain security incidents instantly.
• Integrate security scanning tools (SAST/DAST, dependency scanning, secret detection) directly into CI/CD deployment pipelines. Write and maintain Infrastructure-as-Code (IaC) using Terraform or AWS CloudFormation.
• Ensure multi-account cloud operations meet industry security standards (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) using AWS Control Tower and AWS Config rules.

Core Skills, Competencies, and Key Experiences (What you’ll bring)

• Strong hands‑on experience with enterprise CSPM platforms (Prisma Cloud, Wiz, AWS Security Hub, AWS Config) for continuous risk assessment, misconfiguration detection, and compliance tracking.
• In‑depth architectural security understanding of core and advanced AWS services, including EC2, S3, RDS, DynamoDB, Lambda, ECS/EKS, VPC, Transit Gateway, Route 53, SNS/SQS, KMS, and IAM.
• Solid understanding of AI/ML fundamentals and practical experience applying generative AI/LLM models or AWS AI services (Bedrock, SageMaker, Amazon Q) to automate security analysis, triage, and security operations.
• Deep mastery of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and Cloud Infrastructure Entitlement Management (CIEM) principles.
• Strong knowledge of VPC design, Subnets, Transit Gateway, Security Groups, Network ACLs, AWS WAF, and Shield.
• Proficiency with Terraform, CloudFormation, Python, or Boto3 for automating security controls and remediation workflows.

Professional Experience & Soft Skills

• Must have 5+ years of dedicated experience in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS, GCP environments.
• Proven ability to communicate security risks effectively and partner with developer teams to resolve issues without creating operational friction.
• Demonstrated track record of conducting post-incident root‑cause analysis and driving continuous improvement.

Preferred Certifications

• AWS Certified Security - Specialty
• AWS Certified Solutions Architect – Associate or Professional
• ISC2 Certified Cloud Security Professional (CCSP)
• GIAC Cloud Security Automation (GCSA) / CISSP

About our Department

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.

About Our Company

DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers. Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over‑top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet). Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.

We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.

EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees.

Please contact [e-mail] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications.

Click the links to access the following statements: EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish)

Benefits

• Insurance and Wellbeing
• Financial & Retiral Benefit Program
• Mental Wellbeing
• Employee Stock Purchase Program (ESPP)
• Professional Development Reimbursement
• Time Off
• Team Outings