Job Requirements

Experience: 7+ years

Required Skills

• 7+ years in cybersecurity with 3+ years hands-on securing public cloud (at least OCI/ GCP).
• Proven experience with IAM/SSO/PAM, KMS/HSM, certificates/PKI, and key rotation.
• Practical knowledge of CSPM/CNAPP/CWPP/CIEM and native cloud controls (e.g., GCP SCC, OCI Cloud Guard/WAF).
• Solid networking & web security: VPC/VNet, routing, private link, WAF/DDoS, TLS/mTLS, API gateways.
• Containers/Kubernetes security (admission controls, image scanning, runtime, network policies).
• DevSecOps tooling: Terraform, CI/CD integration, scripting in Python or PowerShell, solid SQL/regex for log analytics.
• Familiarity with banking/regulatory frameworks: SAMA Cybersecurity Framework, NCA ECC, ISO 27001, PCI DSS, SWIFT CSP.
• Excellent documentation and stakeholder skills.

Key Responsibilities

• Own cloud security reference architectures and landing-zone guardrails (network, identity, data, logging).
• Secure configurations for managed DBs, storage,



and serverless and all cloud services.
• Design least-privilege IAM (GCP/OCI IAM), SSO (SAML/OIDC), and PAM workflows.
• Implement key/credential lifecycle, MFA, short-lived tokens, and machine identity governance.
• Assure data encryption at rest/in transit, tokenization where needed.
• Define segmentation, private connectivity, WAF/DDoS/Bot protections, API security, and secure egress controls.
• Manage zero-trust access patterns for admins and services.
• integrate SAST/DAST/Secrets/IaC scanning into CI/CD.
• Maintain control evidence for audits (SAMA/NCA/ISO/PCI).
• Build automated policies-as-code, tagging standards, and exception workflows.
• Integrate cloud logs with SIEM (Splunk).
• Orchestrate scanning of cloud assets and containers, track SLAs, coordinate remediation with platform/service teams.

Work Experience

2-5Years

📌 Cloud Security Engineer (Hyderabad)
🏢 Virtusa
📍 Hyderabad