cloud security engineer

CRED is an exclusive community for India’s most trustworthy and CREDitworthy individuals, where the members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long lost virtue, one of trust, the idea being to create a community centered around this virtue. a community that constantly strives to become more virtuous in this regard till they finally scale their behavior to create a utopia where being trustworthy is the norm and not the exception. to build a community like this requires a community of its own; a community special in its own way, working towards making this vision come true

here’s a thought experiment: what do you get when you put a group of incredibly passionate and driven people and entrust them with the complete freedom to chase down their goals in a completely uninhibited manner? answer: you get something close to what we have at CRED; CRED just has it better

what you will do:

• work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security
• identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in aws-based systems
• own and continuously improve the cloud security posture management (cspm) program aligned with standards like nist 800-53 and iso 27001
• own the cloud workload protection program, including alert investigation and triage
• drive the data security charter, including data classification, masking, and securing large-scale data stores
• automate infrastructure security and build security tooling to reduce manual effort
• conduct security design, infrastructure, and architecture reviews
• build, operate, and maintain cloud security platforms to enhance prevention, detection, and response
• translate product requirements into threat models and identify security risks
• build in-house security frameworks to strengthen security culture across tech teams
• enable compliance across teams (pci dss, iso 27001, dpdpa) and promote best practices
• drive security awareness and engineering maturity across the organisation

you should apply if you have:

• 2–6 years of experience in information security Solid fundamentals on computer networks, operating systems (linux), containers and secure cloud architecture
• strong programming skills in python, go, or bash
• solid understanding of cloud security with hands-on experience in aws / gcp / azure
• experience building and automating custom security tools
• understanding of microservices, ci/cd pipelines, containers, and securing containerised workloads
• strong grasp of core security principles like least privilege, defence-in-depth, and zero trust
• a data-driven mindset with the ability to influence stakeholders
• security projects on github or technical blogs
• strong communication skills and the ability to be a go-to security partner for engineers and product teams
• a proactive approach to staying updated on security threats, breaches, tools, and research
• basic understanding of llms, mcp, and ai agents and Interest in building ai-driven security workflows.
• familiarity with vulnerability management, patching cycles, and cvss