Job Title: DevSecOps / Cloud Security Engineer Role Objective: Responsible for independently managing and improving the organization's Cloud Security and DevSecOps security posture across AWS/Azure/GCP. The role will work with Cloud, Infrastructure, Application and DevOps teams to identify security risks, implement security controls, monitor posture and drive remediation.

Key Responsibilities
• Own and manage Cloud Security posture across AWS/Azure/GCP environments.
• Implement and operate CSPM/CNAPP/CWPP solutions such as Wiz, Prisma Cloud, Microsoft Defender for Cloud, Orca or equivalent.
• Identify and remediate cloud misconfigurations, security gaps and exposures.
• Implement cloud security controls covering IAM/RBAC/PAM, network security, WAF, encryption, KMS/Key Vault, logging and monitoring.
• Perform cloud security assessments against CIS, NIST, ISO 27001, SOC 2 or relevant security standards.
• Manage cloud vulnerability/exposure management using tools such as Tenable/Nessus, Qualys, Rapid7 or equivalent.
• Embed security into CI/CD pipelines covering SAST, DAST, SCA, secrets scanning and security gates.
• Implement IaC security using Terraform/CloudFormation/Bicep with tools such as Checkov, tfsec or equivalent.
• Implement container/Kubernetes security, including image scanning and workload protection.
• Drive DevSecOps / Shift-Left Security practices with development and engineering teams.
• Integrate security tools with SIEM/SOC and support cloud threat detection and incident response.




• Automate security controls, compliance checks and remediation wherever possible.
• Track security findings, risks, remediation SLAs and provide security posture reporting to leadership.
• Work independently with technology teams and ensure security requirements are implemented without requiring significant technical handholding. Experience and

Skills:
• Minimum 5 years relevant Cloud Security / DevSecOps experience.
• Strong hands-on AWS/Azure/GCP security experience.
• Hands-on CSPM/CNAPP/CWPP experience.
• Solid understanding of Cloud Security Architecture.
• Hands-on experience with IAM, PAM, network security, encryption and cloud-native security controls.
• Hands-on DevSecOps security experience.
• SAST, DAST, SCA, secrets and container security.
• CI/CD security using Jenkins/GitLab/GitHub/Azure DevOps or equivalent.
• IaC security and Terraform/CloudFormation/Bicep.
• Vulnerability/exposure management.
• Security monitoring/SIEM and incident response.
• Good understanding of CIS/NIST/ISO 27001/SOC 2 security controls.
• Ability to independently own the Cloud Security portfolio from the CISO/Security perspective. Preferred Tools: CSPM/CNAPP/CWPP: Wiz, Prisma Cloud, Defender for Cloud, Orca VM/Exposure: Tenable, Nessus, Qualys, Rapid7 DevSecOps: Checkmarx, Veracode, Snyk, SonarQube, Fortify, Semgrep Container: Trivy, Aqua, Prisma, Wiz Cloud: AWS Security Hub, GuardDuty, Azure Defender/Defender for Cloud

📌 DevSecOps / Cloud Security Engineer (Navi Mumbai)
🏢 Saraswat Bank
📍 Navi Mumbai