Job Title: DevSecOps / Cloud Security Engineer

Role Objective:

Responsible for independently managing and improving the organization's Cloud Security and DevSecOps security posture across AWS/Azure/GCP. The role will work with Cloud, Infrastructure, Application and DevOps teams to identify security risks, implement security controls, monitor posture and drive remediation.

Key Responsibilities

- Own and manage Cloud Security posture across AWS/Azure/GCP environments.
- Implement and operate CSPM/CNAPP/CWPP solutions such as Wiz, Prisma Cloud, Microsoft Defender for Cloud, Orca or equivalent.
- Identify and remediate cloud misconfigurations, security gaps and exposures.
- Implement cloud security controls covering IAM/RBAC/PAM, network security, WAF, encryption, KMS/Key Vault, logging and monitoring.
- Perform cloud security assessments against CIS, NIST, ISO 27001, SOC 2 or relevant security standards.
- Manage cloud vulnerability/exposure management using tools such as Tenable/Nessus, Qualys, Rapid7 or equivalent.
- Embed security into CI/CD pipelines covering SAST, DAST, SCA, secrets scanning and security gates.
- Implement IaC security using Terraform/CloudFormation/Bicep with tools such as Checkov, tfsec or equivalent.
- Implement container/Kubernetes security, including image scanning and workload protection.
- Drive DevSecOps / Shift-Left Security practices with development and engineering teams.
- Integrate security tools with SIEM/SOC and support cloud threat detection and incident response.




- Automate security controls, compliance checks and remediation wherever possible.
- Track security findings, risks, remediation SLAs and provide security posture reporting to leadership.
- Work independently with technology teams and ensure security requirements are implemented without requiring significant technical handholding.

Experience and Skills:

- Minimum 5 years relevant Cloud Security / DevSecOps experience.
- Strong hands-on AWS/Azure/GCP security experience.
- Hands-on CSPM/CNAPP/CWPP experience.
- Solid understanding of Cloud Security Architecture.
- Hands-on experience with IAM, PAM, network security, encryption and cloud-native security controls.
- Hands-on DevSecOps security experience.
- SAST, DAST, SCA, secrets and container security.
- CI/CD security using Jenkins/GitLab/GitHub/Azure DevOps or equivalent.
- IaC security and Terraform/CloudFormation/Bicep.
- Vulnerability/exposure management.
- Security monitoring/SIEM and incident response.
- Good understanding of CIS/NIST/ISO 27001/SOC 2 security controls.
- Ability to independently own the Cloud Security portfolio from the CISO/Security perspective.

Preferred Tools: CSPM/CNAPP/CWPP: Wiz, Prisma Cloud, Defender for Cloud, Orca

VM/Exposure: Tenable, Nessus, Qualys, Rapid7

DevSecOps: Checkmarx, Veracode, Snyk, SonarQube, Fortify, Semgrep

Container: Trivy, Aqua, Prisma, Wiz

Cloud: AWS Security Hub, GuardDuty, Azure Defender/Defender for Cloud

📌 DevSecOps / Cloud Security Engineer (Navi Mumbai)
🏢 Saraswat Bank
📍 Navi Mumbai