Senior Engineer - Cloud Security

EchoStar; Bengaluru; On-site; INR 3,500,000 - 6,500,000; Full time

Benefits offered by this job

Insurance and Wellbeing

Financial & Retiral Benefit Program

Mental Wellbeing

Employee Stock Purchase Program (ESPP)

Professional Development Reimbursement

Time Off

Team Outings

Job summary

EchoStar's India division is seeking a Senior AWS Security Engineer to design, deploy, and maintain security controls across AWS infrastructure, focusing on CSPM, IAM governance, and AI-driven security workflows.

You will implement security tooling, manage encryption and network controls, and automate incident response across multi-account environments, ensuring compliance with industry standards while enabling scalable cloud growth.

Qualifications

• 5+ years in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS or GCP environments.
• Proven ability to communicate security risks effectively and partner with developer teams to resolve issues without friction.
• Demonstrated track record of post-incident root-cause analysis and driving continuous improvement.

Responsibilities

• Implement and manage CSPM tools to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.
• Establish baseline security practices across AWS services to guarantee defense-in-depth across the entire AWS ecosystem.
• Evaluate, integrate, and operationalize AI/ML capabilities to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.
• Architect, enforce, and audit IAM policies, SCPs, role hierarchies, and temporary credentials adhering to least privilege and CIEM principles.
• Configure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager; maintain secure VPC architectures, SGs, NACLs, and WAF configurations.
• Monitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config; build automated incident response playbooks using EventBridge, Lambda, and SOAR tools.
• Integrate security scanning tools into CI/CD deployment pipelines; write and maintain IaC using Terraform or CloudFormation.
• Ensure multi-account cloud operations meet SOC 2, ISO 27001, HIPAA, PCI-DSS standards using AWS Control Tower and AWS Config rules.

Skills

CSPM platforms

IAM & SCPs

CIEM

Terraform

CloudFormation

Python/Boto3

AI/ML in security workflows

Education

AWS Certified Security - Specialty

ISC2 CCSP

GIAC Cloud Security Automation (GCSA)

CISSP

Tools

AWS Security Hub

Terraform

CloudFormation

Python

Boto3

AWS Bedrock

SageMaker

Job description

What Success Looks Like (Objectives)

We are seeking a highly skilled AWS Senior Security Engineer to join our cloud security team. In this role, you will design, deploy, and maintain robust security controls across our Amazon Web Services (AWS) infrastructure. You will focus on Cloud Security Posture Management (CSPM), identity and access management, AI-driven automation and security implementation, and broad-spectrum architectural security across all core AWS services—ensuring our cloud workloads remain resilient against emerging threats while enabling rapid business growth.

Key Responsibilities

• Implement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub, etc) to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.
• Establish baseline security practices across the breadth of AWS services (Compute, Storage, Database, Serverless, Networking, Messaging, and Governance) to guarantee defense-in-depth across the entire AWS ecosystem.
• Evaluate, integrate, and operationalize AI/ML capabilities (e.g., AWS Bedrock, Amazon Q, SageMaker, LLM security practices) to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.
• Architect, enforce, and audit fine-grained IAM policies, Service Control Policies (SCPs), role hierarchies, and temporary credentials adhering strictly to the principle of least privilege and CIEM principles.
• Configure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager. Maintain secure VPC network architectures, security groups, Network ACLs, and AWS WAF configurations.
• Monitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config. Build automated incident response playbooks using EventBridge, Lambda, and SOAR tools to contain security incidents instantly.
• Integrate security scanning tools (SAST/DAST, dependency scanning, secret detection) directly into CI/CD deployment pipelines. Write and maintain Infrastructure-as-Code (IaC) using Terraform or AWS CloudFormation.
• Ensure multi-account cloud operations meet industry security standards (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) using AWS Control Tower and AWS Config rules.

Core Skills, Competencies, and Key Experiences (What you’ll bring)

• Strong hands-on experience with enterprise CSPM platforms (Prisma Cloud, Wiz, AWS Security Hub, AWS Config) for continuous risk assessment, misconfiguration detection, and compliance tracking.
• In-depth architectural security understanding of core and advanced AWS services, including EC2, S3, RDS, DynamoDB, Lambda, ECS/EKS, VPC, Transit Gateway, Route 53, SNS/SQS, KMS, and IAM.
• Solid understanding of AI/ML fundamentals and practical experience applying generative AI/LLM models or AWS AI services (Bedrock, SageMaker, Amazon Q) to automate security analysis, triage, and security operations.
• Deep mastery of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and Cloud Infrastructure Entitlement Management (CIEM) principles.
• Strong knowledge of VPC design, Subnets, Transit Gateway, Security Groups, Network ACLs, AWS WAF, and Shield.
• Proficiency with Terraform, CloudFormation, Python, or Boto3 for automating security controls and remediation workflows.

Professional Experience & Soft Skills

• Must have 5+ years of dedicated experience in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS, GCP environments.
• Proven ability to communicate security risks effectively and partner with developer teams to resolve issues without creating operational friction.
• Demonstrated track record of conducting post-incident root-cause analysis and driving continuous improvement.

Preferred Certifications

• AWS Certified Security - Specialty
• AWS Certified Solutions Architect – Associate or Professional
• ISC2 Certified Cloud Security Professional (CCSP)
• GIAC Cloud Security Automation (GCSA) / CISSP

About our Department

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.

About Our Company

DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.

Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).

Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.

EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.

Benefits

• Insurance and Wellbeing
• Financial & Retiral Benefit Program
• Mental Wellbeing
• Employee Stock Purchase Program (ESPP)
• Professional Development Reimbursement
• Time Off
• Team Outings

We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process. EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to make echostar.com and jobs.echostar.com accessible to users. Please [e-mail] if you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only; do not use this contact information to inquire about the status of applications. EEO Policy Statement, Pay Transparency, EEOC Know Your Rights (English/Spanish)