About the Role

Rubiscape is deployed across a uniquely
complex topology — public SaaS, customer BYOC (Bring Your Own Cloud), hybrid,
on-premises, and fully air-gapped environments. As Cloud Security Engineer, you
will be responsible for securing this entire deployment surface: cloud
infrastructure hardening, identity and access governance in AWS/Azure/GCP,
Kubernetes security, and CSPM. You will work alongside platform infrastructure
and DevSecOps teams to ensure that Rubiscape’s cloud posture meets the bar set
by Fortune 500 and public sector customers who run mission-critical decisions
on the platform.

Key Responsibilities

· Design and implement cloud
security architecture for Rubiscape’s AWS, Azure, and GCP deployments, covering
VPC design, IAM least-privilege, service control policies, and network security
groups.

· Operate Cloud Security Posture
Management (CSPM) tooling (Wiz, Prisma Cloud, or AWS Security Hub); triage
findings, prioritise by risk, and drive remediation with infrastructure owners.

· Harden Kubernetes clusters
(EKS, AKS, GKE)



running Rubiscape’s studio workloads: enforce pod security
standards, network policies, image signing, and runtime protection.

· Build and maintain automated
IaC security scanning (Checkov, tfsec) as a mandatory gate in Terraform and
Helm chart pipelines.

· Design the BYOC customer
onboarding security model — ensuring tenant isolation, key management
separation, and audit log forwarding without exposing Rubiscape control-plane
credentials.

· Define and validate cloud
security controls for ISO 27001, SOC 2, and CERT-IN cloud security guidelines;
produce cloud-specific evidence packs for compliance audits.

· Respond to cloud security
incidents — containment, forensic investigation, root cause analysis, and
post-incident hardening recommendations.

Nice to Have

· Certifications: AWS Security
Specialty, CCSP, Google Skilled Cloud Security Engineer, or CKS (Certified
Kubernetes Security Specialist).

· Experience

📌 Cloud Security Engineer (Pune)
🏢 Rubiscape
📍 Pune