Cloud Security Engineer

SRM TechnologiesRemoteFull-timeMid level, 2–5 yearsListed 2 weeks ago

Apply now

About this role

This is a remote position.

Job Description: Cloud Security Engineer – 5+yrs

Role Summary

We are looking for an experienced Cloud Security Engineer to support and enhance

the security posture of multi-cloud environments. This role focuses on cloud security

operations, monitoring, incident response, and implementation of best practices

across cloud, endpoint, and email security domains.

Key Responsibilities

Security Findings & Remediation Documentation

● Analyze and document cloud, email, endpoint, and security monitoring findings.

● Produce clear and actionable documentation covering:

o Risk assessment and severity classification

o Impact analysis

o Recommended remediation actions

● Maintain findings documentation within ticketing systems, reports, or other designated

platforms.

Alert Triage & Investigation

● Triage, investigate, and classify security alerts across cloud and security platforms.

● Maintain complete and accurate investigation records, including:

o Analysis performed

o Containment or mitigation actions (if applicable)

o Escalation details

o Final alert disposition

AI Security in Cloud Environments

● Secure AI/ML workloads deployed in cloud environments, including training pipelines, data

storage, and inference endpoints.

● Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or

unauthorized access.

● Collaborate with engineering teams to ensure secure deployment of AI services following

cloud security best practices.

● Contribute to governance and policy development for responsible and secure AI usage in

the cloud.

Configuration & Security Posture Assessment

● Conduct secure configuration reviews across cloud environments.

● Perform IAM assessments and analyze CSPM findings.

● Document posture assessment results and provide recommendations for security posture

improvements.

● Support continuous monitoring and tuning of cloud security controls.

Security Automation & Tooling

● Design, develop, and maintain security automation scripts and workflow enhancements.

● Create automation artifacts using scripting languages such as Python.

● Provide sufficient documentation and usage notes to enable ongoing operation and

maintenance by internal teams.

● Build cloud security infrastructure using infrastructure as code tools such as Terraform

Operational Metrics & Reporting

● Prepare periodic cloud security operational reports, including:

o Alert volumes and trends

o Remediation progress

o Posture improvements

o Tool tuning and optimization efforts

● Present concise status updates to stakeholders as requested.

Incident Response Support

● Support investigation and response to security incidents impacting cloud environments.

● Contribute to incident reports, investigation summaries, timelines, and technical analysis.

● Assist with root-cause analysis and corrective action recommendations.

Required Skills & Qualifications

● Bachelor’s degree in computer science, Cybersecurity, or related field.

● 5+ years of experience in Cloud Security / Security Operations.

● Hands-on experience with AWS, Azure, GCP, or OCI security services.

● Strong knowledge of IAM, network security, and cloud-native security controls.

● Experience with CSPM tools and EDR platforms like Crowdstrike

● Familiarity with SIEM tools and incident response processes.

● Hands-on experience with identity-aware access solutions such as Teleport

(or similar platforms) for secure access to infrastructure and services.

● Proficiency in scripting languages like Python.

● Foundational understanding of securing AI/ML workloads in cloud

environments (e.g., model access control, API security, data protection).

Preferred Qualifications

● Certifications such as AWS Security Specialty, Azure Security Engineer,

CCSP, or CISSP.

● Experience with automation, SOAR platforms, or DevSecOps practices.

● Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).

● Understanding of email security protocols (SPF, DKIM, DMARC).