Job Requirements

Experience: 7+ years

Required Skills
7+ years in cybersecurity with 3+ years hands-on securing public cloud (at least OCI/ GCP).
Proven experience with IAM/SSO/PAM, KMS/HSM, certificates/PKI, and key rotation.
Practical knowledge of CSPM/CNAPP/CWPP/CIEM and native cloud controls (e.g., GCP SCC, OCI Cloud Guard/WAF).
Robust networking & web security: VPC/VNet, routing, private link, WAF/DDoS, TLS/mTLS, API gateways.
Containers/Kubernetes security (admission controls, image scanning, runtime, network policies).
DevSecOps tooling: Terraform, CI/CD integration, scripting in Python or PowerShell, solid SQL/regex for log analytics.
Familiarity with banking/regulatory frameworks: SAMA Cybersecurity Framework, NCA ECC, ISO 27001, PCI DSS, SWIFT CSP.
Excellent documentation and stakeholder skills.

Key Responsibilities
Own cloud security reference architectures and landing-zone guardrails (network, identity, data, logging).
Secure configurations for managed DBs, storage,



and serverless and all cloud services.
Design least-privilege IAM (GCP/OCI IAM), SSO (SAML/OIDC), and PAM workflows.
Implement key/credential lifecycle, MFA, short-lived tokens, and machine identity governance.
Assure data encryption at rest/in transit, tokenization where needed.
Define segmentation, private connectivity, WAF/DDoS/Bot protections, API security, and secure egress controls.
Manage zero-trust access patterns for admins and services.
integrate SAST/DAST/Secrets/IaC scanning into CI/CD.
Maintain control evidence for audits (SAMA/NCA/ISO/PCI).
Build automated policies-as-code, tagging standards, and exception workflows.
Integrate cloud logs with SIEM (Splunk).
Orchestrate scanning of cloud assets and containers, track SLAs, coordinate remediation with platform/service teams.

Work Experience 2-5Years

📌 Cloud Security Engineer Hyderabad (India)
🏢 Virtusa
📍 India