Cloud Security Engineer

About the Role: We are looking for a highly skilled DevSecOps Engineer to join our Cloud Security team and help secure large-scale cloud infrastructure powering global FinTech products. In this role, you will work across AWS, Kubernetes, Terraform, and CI/CD pipelines to build secure, scalable, and automated cloud-native platforms. The ideal candidate is an engineering-first security professional with strong hands-on experience in cloud security, security automation, and DevSecOps practices within a product-based startup environment. Key Responsibilities: - Secure AWS cloud infrastructure, Kubernetes clusters, and containerized applications. - Design and implement cloud security controls, including IAM, VPC security, secrets management, and infrastructure hardening. - Integrate automated security scanning into CI/CD pipelines. - Implement vulnerability, dependency, secret, and Infrastructure-as-Code (IaC) security scanning. - Perform threat modeling, security architecture reviews, and risk assessments. - Investigate security incidents, conduct root cause analysis, and implement preventive measures. - Develop security automation tools using Python or Go. - Secure Terraform deployments and cloud configurations. - Collaborate with engineering teams to embed security throughout the Software Development Lifecycle (SDLC). - Drive continuous improvements in cloud security, DevSecOps, and security best practices. Required Skills: - AWS Cloud Security (IAM, VPC, Security Groups, CloudTrail, GuardDuty) - Kubernetes & Container Security - DevSecOps & CI/CD Security - Terraform (Infrastructure as Code) - Cloud Security Architecture - Vulnerability Management - Threat Modeling - Secrets Management - Infrastructure Hardening - Security Logging, Monitoring & Observability - Python or Go for security automation Required Experience: - 5+ years of experience in Cloud Security, DevSecOps, or Security Engineering. - Strong hands-on experience securing AWS cloud environments. - Experience securing Kubernetes clusters and containerized workloads. - Experience implementing security controls within CI/CD pipelines. - Hands-on expertise with Terraform and Infrastructure-as-Code security. - Strong understanding of cloud security risks, privilege escalation, credential management, network security, and software supply chain security. - Experience building security automation using Python, Go, or similar scripting languages. - Excellent communication and collaboration skills.