Job Requirements

Experience: 7+ years

Required Skills

- 7+ years in cybersecurity with 3+ years hands-on securing public cloud (at least OCI/ GCP).
- Proven experience with IAM/SSO/PAM, KMS/HSM, certificates/PKI, and key rotation.
- Practical knowledge of CSPM/CNAPP/CWPP/CIEM and native cloud controls (e.g., GCP SCC, OCI Cloud Guard/WAF).
- Robust networking & web security: VPC/VNet, routing, private link, WAF/DDoS, TLS/mTLS, API gateways.
- Containers/Kubernetes security (admission controls, image scanning, runtime, network policies).
- DevSecOps tooling: Terraform, CI/CD integration, scripting in Python or PowerShell, solid SQL/regex for log analytics.
- Familiarity with banking/regulatory frameworks: SAMA Cybersecurity Framework, NCA ECC, ISO 27001, PCI DSS, SWIFT CSP.
- Excellent documentation and stakeholder skills.

Key Responsibilities
- Own cloud security reference architectures and landing-zone guardrails (network, identity, data, logging).
- Secure configurations for managed DBs, storage,



and serverless and all cloud services.
- Design least-privilege IAM (GCP/OCI IAM), SSO (SAML/OIDC), and PAM workflows.
- Implement key/credential lifecycle, MFA, short-lived tokens, and machine identity governance.
- Assure data encryption at rest/in transit, tokenization where needed.
- Define segmentation, private connectivity, WAF/DDoS/Bot protections, API security, and secure egress controls.
- Manage zero-trust access patterns for admins and services.
- integrate SAST/DAST/Secrets/IaC scanning into CI/CD.
- Maintain control evidence for audits (SAMA/NCA/ISO/PCI).
- Build automated policies-as-code, tagging standards, and exception workflows.
- Integrate cloud logs with SIEM (Splunk).
- Orchestrate scanning of cloud assets and containers, track SLAs, coordinate remediation with platform/service teams.

Work Experience 2-5Years

📌 Cloud Security Engineer (Hyderabad)
🏢 Virtusa
📍 Hyderabad