Senior Security Cloud Engineer

IC; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

IC is seeking a Senior Security Engineer - Cloud and Infrastructure to strengthen security across its cloud platforms and infrastructure. The role emphasizes hands-on AWS security, security architecture reviews, and automation with Terraform and Ansible.

The ideal candidate brings deep expertise in AWS security controls, IAM, networking, and multiaccount governance, with a strong automation mindset and experience in vulnerability management, SIEM, and incident response.

Qualifications

• At least 10 years in cybersecurity, cloud security or infrastructure security.
• Hands-on AWS security with IAM, VPC, GuardDuty, WAF and multi-account governance.
• Experience integrating security into IaC and CI/CD workflows.
• Strong scripting in Python, PowerShell or Bash.
• Networking and security certifications preferred (CCNA or higher).

Responsibilities

• Lead security architecture reviews for AWS, on-prem and hybrid environments.
• Design and enforce security controls across identity, networking and compute.
• Automate security checks and remediation in Terraform/Ansible pipelines.
• Tune detections, SIEM, CNAPP alerts and incident investigations.
• Mentor engineers and communicate security priorities to teams.

Skills

AWS security

Security architecture

Terraform

Ansible

Kubernetes

Python scripting

CI/CD security integration

Networking security

Cloud security engineering

Incident investigation

Education

AWS Certification (Security Specialty / SA Architect)

Kubernetes certifications

Bachelors in CS/Engineering or related discipline

Tools

Terraform

Ansible

Cloud security tooling

CI/CD tooling integrations

Job description

Role Overview

We are seeking a highly technical and experienced Senior Security Engineer - Cloud and Infrastructure to strengthen security across IC’s Group cloud platforms, infrastructure and technology services. The successful candidate will bring deep hands-on AWS expertise, strong systems, networking and infrastructure security knowledge, and an automation mindset. They will lead cloud security architecture reviews, engineer security controls, automate security processes and work directly with technology teams to resolve complex security risks. This is a senior individual contributor role with significant technical ownership. The primary focus is AWS security, infrastructure and automation, complemented by vulnerability management, SOC improvement, incident investigation, and application and API security assessments.

Key Responsibilities

Cloud Security, Architecture and Engineering

• Lead security architecture reviews for new systems, significant changes and existing AWS, on-premises and hybrid environments.
• Design, implement and validate AWS security controls across identity and access management, networking, compute, storage, encryption, secrets management and logging.
• Strengthen security across AWS accounts through organisational policies, service control policies, secure account structures and centralised security monitoring.
• Identify and remediate excessive permissions, exposed resources, insecure configurations and attack paths across cloud environments.
• Assess and improve container, Kubernetes and Amazon EKS security, including workload identities, network access and runtime controls.
• Review network architectures and security controls, including segmentation, routing, firewalls, VPNs and connectivity between cloud and on-premises environments.
• Optimise AWS WAF rules and policies using traffic analysis and security findings to strengthen protection and minimise false positives.
• Work closely with Cloud and Infrastructure and Platform Engineering teams to embed security into infrastructure design, deployment and operation.
• Define reusable security architectures, hardening standards and secure configuration patterns, and verify their effectiveness through technical testing.

Automation, AI and Technical Leadership

• Apply an automation mindset to security engineering, replacing repetitive manual activities with reliable, reusable workflows.
• Use Terraform and Ansible to embed security controls into infrastructure provisioning, configuration management and remediation.
• Develop scripts and API integrations to automate security checks, vulnerability validation, evidence collection and reporting.
• Integrate infrastructure-as-code scanning, policy validation and security checks into CI/CD pipelines.
• Design automation with appropriate testing, exception handling, approval controls and rollback capabilities.
• Apply AI-assisted tools to security analysis, investigation and engineering tasks, independently validating outputs and protecting sensitive information.
• Assess security risks introduced by AI services and integrations, including data exposure, prompt injection and excessive permissions.
• Mentor engineers, guide technical decisions and communicate security priorities clearly to technology teams and management.

Vulnerability Management and Risk Analysis

• Drive vulnerability management across cloud platforms and supporting infrastructure, from discovery and validation through remediation and verified closure.
• Prioritise findings using exploitability, exposure, asset criticality, attack paths and potential business impact.
• Work with technology owners to agree remediation actions and timelines, escalating overdue or material risks.
• Conduct technical risk assessments and explain treatment options, compensating controls and residual risk.
• Analyse recurring findings and address their underlying causes through improvements to architecture, infrastructure code and configuration standards.

SOC Engineering and Incident Investigation

• Improve security telemetry, SIEM detections and investigation workflows across AWS, identity and infrastructure environments.
• Investigate and respond to SIEM and Cloud Native Application Protection Platform (CNAPP) alerts, coordinate remediation, and fine-tune detection rules, policies and thresholds to improve alert quality and reduce false positives.
• Ensure relevant cloud activity and security events are captured, centralised and available for investigation.
• Develop and tune detections for suspicious access, privilege escalation, configuration changes and other relevant attack techniques.
• Automate alert enrichment, investigation and response activities with appropriate approval controls.
• Provide senior technical expertise during complex cloud and infrastructure investigations, supporting containment and recovery.
• Validate detection coverage through controlled testing and translate incident findings into stronger preventive and detective controls.

Security Assessments and Penetration Testing

• Conduct end-to-end security assessments and penetration testing across AWS environments, infrastructure, web applications and APIs, from scoping through reporting and retesting.
• Identify exploitable misconfigurations, authentication and authorisation weaknesses, privilege escalation opportunities and attack paths across applications and cloud services.
• Combine architecture and configuration reviews with hands-on testing to assess security controls and business impact.
• Document findings with clear evidence and practical remediation guidance, working with Cloud, Development and Application Security teams to verify fixes.
• Review external assessment findings and coordinate remediation and retesting with relevant technology teams.

Required Experience and Technical Skills

• At least 10 years of relevant professional experience across cybersecurity, cloud security and infrastructure security, with substantial hands-on engineering responsibility.
• Strong hands-on AWS security and architecture expertise is mandatory, including IAM, AWS Organizations, service control policies, VPC security, EC2, S3, KMS, secrets management, CloudTrail, GuardDuty, Security Hub and AWS WAF, including rule optimisation and tuning.
• Demonstrated experience designing and implementing security controls across multi-account AWS environments.
• Strong understanding of networking and network security is mandatory, including TCP/IP, DNS, routing, switching, subnetting, firewalls, VPNs, network segmentation and traffic analysis.
• CCNA certification is required as a minimum, or a higher-level relevant networking certification.
• Hands-on experience with Terraform and Ansible, including developing and reviewing infrastructure definitions, configuration playbooks and automated remediation.
• Strong scripting skills in Python, PowerShell or Bash, with practical experience integrating tools through APIs.
• An automation mindset, demonstrated through projects that improve security consistency, scalability and operational efficiency.
• Practical experience securing containers, Kubernetes and Amazon EKS, including workload permissions and runtime controls.
• Experience embedding security checks into infrastructure-as-code and CI/CD workflows.
• Strong knowledge of Windows, Linux, Active Directory and privileged access.
• Experience with vulnerability management, technical risk analysis and verification of remediation.
• Practical experience investigating and responding to SIEM and CNAPP alerts, including tuning detection rules, policies and thresholds.
• Experience with cloud log analysis, detection engineering and incident investigation.
• Practical penetration testing experience across cloud and infrastructure, with working knowledge of web application and API testing.
• Understanding of common OWASP vulnerabilities, authentication and authorisation controls, and application-to-cloud security risks.
• Practical use of AI-assisted tools in security or engineering, with the ability to explain implemented use cases and validate results.
• Strong technical documentation and English communication skills, with the ability to work independently across geographically distributed teams.

Desirable Qualifications

• AWS Certified Security - Specialty and/or AWS Certified Solutions Architect - Professional are strongly preferred.
• AWS Certified Solutions Architect - Associate, Terraform Associate or relevant Kubernetes certifications are advantageous.
• Security certifications such as OSCP, OSEP, GIAC, CISSP or CCSP are advantageous but are not required.
• Experience with cloud security posture management, cloud workload protection and policy-as-code.
• Experience with SOAR platforms, automated incident response or AI-enabled security workflows.
• Experience in financial services, trading platforms, fintech or other business-critical environments.
• Familiarity with CIS Benchmarks, MITRE ATT&CK, OWASP, NIST and ISO 27001.
• Degree in Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical experience.

Personal Attributes

• Strong ownership, independent judgement and accountability for technical outcomes.
• A practical engineering approach with a preference for automation and sustainable solutions.
• An investigative mindset and the ability to challenge assumptions with evidence.
• Sound judgement when introducing changes or testing business-critical environments.
• A collaborative approach that balances security requirements with operational needs.
• Demonstrated technical capability, engineering outcomes and practical AWS expertise will carry greater weight than certifications alone.