Position Overview

We are seeking an experienced, hands-on Staff Security Engineer with deep expertise in securing large-scale cloud environments on AWS and GCP. The ideal candidate has spent years designing, building, and operating cloud security architectures and controls such as IAM, network security, encryption, detection, and guardrails, and brings a working knowledge of securing AI/ML workloads as these become a growing part of our cloud estate. You will play a pivotal role in hardening our multi-account, multi-region cloud footprint and in extending proven cloud security practices to AI-powered services, including generative and agentic AI implementations.

Primary Responsibilities

- Design, implement, and operate cloud security architectures across AWS and GCP: organization/account structures, SCPs and organization policies, IAM and permission boundaries, KMS and encryption strategy, VPC design and network segmentation.
- Build and maintain preventive and detective guardrails at scale; manage CSPM, security services (e.g., AWS Security Hub, GuardDuty, GCP Security Command Center), and automated remediation.
- Embed security into infrastructure-as-code pipelines (Terraform, CloudFormation): policy-as-code, pre-deployment scanning, drift detection, and secure module patterns.
- Secure container and Kubernetes workloads (EKS, GKE), including image supply chain, runtime controls, and workload identity.
- Own vulnerability management across the cloud estate: continuous discovery and asset inventory, cloud-native and agent-based scanning (workloads, containers, serverless),



risk-based prioritization using exploitability and reachability context (e.g., EPSS, KEV, internet exposure), and driving remediation with workload owners against defined SLAs.
- Conduct security risk assessments, security design reviews, and threat modeling for cloud workloads, including AI/ML services and applications.
- Extend cloud security controls to AI/ML platforms and services (e.g., AWS Bedrock, etc.): data protection, access control, endpoint and API security, and controls for agentic AI components such as MCP servers and tool integrations.
- Develop and enforce security standards, policies, and baselines for cloud and AI/ML technologies, and drive their adoption across engineering teams.
- Collaborate with DevOps, Platform, Data, and Engineering teams to integrate security throughout the SDLC and ML lifecycle.
- Support monitoring and response for security incidents involving cloud and AI/ML infrastructure, ensuring rapid containment and remediation.

Required Qualifications

- Bachelors degree or equivalent practical experience.
- 10+ years of overall security engineering experience, including security assessments, security design reviews, and threat modeling.
- 6+ years of hands-on cloud security engineering experience on AWS and/or GCP, with demonstrated depth in at least one and working proficiency in the other.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Cloud & AI Security Architect (Bengaluru)
🏢 Sendhelper
📍 Bengaluru