Experience: 6+ Years | Location: Bangalore, India

Role Summary

We are seeking an experienced Cloud Security Engineer to drive (Hands-On) cloud and infrastructure security. The role focuses on cloud security, CNAPP tools, EDR solutions, cloud posture management, patching, IaC security, and SIEM/SOC collaboration. You will secure enterprise workloads, implement automated compliance controls, and coordinate with SOC and DevOps teams while communicating risks and remediation clearly to stakeholders.

Key Responsibilities

Cloud & Infrastructure Security
OWASP-DT Platform Administration.
Amazon GuardDuty, AWS Inspector, IaC with Terraform, SSM Agent, SSM Document, Positive knowledge in AWS Infrastructure, Linux, Ec2, Lambda Function.
Harden Linux/Windows workloads using CIS Benchmarks/STIGs.
Implement least privilege access and manage secrets securely.

CNAPP & Cloud Posture Management
Continuously monitor cloud workloads using CNAPP platforms
Assess and remediate misconfigurations and drift against CIS/NIST/internal standards.
EDR & Threat Detection
Deploy and manage EDR solutions
Integrate endpoint and cloud logs into SIEM
Participate in SOC operations, incident response, and threat hunting.

Patch Management & Vulnerability Remediation




Lead automated patching workflows for servers, containers, and cloud services.
Conduct vulnerability scanning and remediation
Automate security operations to reduce manual toil.

Compliance & Governance
Maintain compliance with ISO 27001, NIST, CIS, GDPR, HIPAA.
Generate audit reports, track remediation actions, and conduct risk assessments.

Communication & Collaboration
Act as a security liaison between DevOps, SOC, and business teams.
Communicate risks, remediation plans, and posture findings to technical and non-technical stakeholders.
Promote security best practices across teams.

Required Skills & Expertise (Must have)
OWASP-DT Tool Platform Administration (MUST HAVE)
Cloud Security & CNAPP: AWS, GCP
EDR & Endpoint Security
Cloud Posture Management & IaC Security: Terraform, CloudFormation
Patch & Vulnerability Management: Automated patching in AWS/GCP
Threat Detection & SOC/SIEM: CloudWatch, Trend Micro Vision One, Cloudtrail
Linux & Windows Security: OS hardening, permissions, network security
Scripting & Automation: Python, Bash,
Compliance & Governance: ISO 27001, NIST, CIS, GDPR, HIPAA
Soft Skills: Solid communication, documentation, cross-team collaboration

📌 Cloud/app Security Specialist Bengaluru (India)
🏢 iKrux
📍 India