Secure AWS and GCP environments through IAM, network security, encryption, logging, and access controls.

Perform application security reviews, vulnerability assessments, penetration-testing coordination, and remediation tracking.

Secure Kubernetes, Docker, Terraform, Linux systems, and cloud infrastructure.

Improve threat detection, security logging, alerting, incident response, and investigation processes.

Support SOC 2, ISO 27001, customer security assessments, audits, and evidence collection.

Build scripts and tools to automate security checks, reporting, and remediation.

Investigate security incidents, perform root-cause analysis, and implement preventive measures.

Partner with Engineering, DevOps, IT, and Product teams to embed security into everyday workflows.

6–10 years of experience in information security, cloud security, application security, or DevSecOps.





- Robust hands-on experience with AWS and/or GCP security.
- Understanding of IAM, least-privilege access, secrets management, encryption, and network security.
- Experience integrating security tools into CI/CD pipelines.
- Working knowledge of Kubernetes, Docker, Terraform, GitHub Actions, Jenkins, or similar technologies.
- Knowledge of OWASP Top 10, common application vulnerabilities, and secure coding practices.
- Experience with vulnerability management, security incident response, and risk assessment.
- Scripting skills in Python, Bash, or similar languages.
- Equal opportunity employer that values diversity and prohibits discrimination on protected grounds.

📌 AWS Security Engineer (Bengaluru)
🏢 CommerceIQ
📍 Bengaluru