AWS Cloud Security Engineer (6-10 years)

Experience: 6 Years Location: Bangalore Work Mode: Work From Office – 5 Days a Week Priority: Technical expertise and hands-on experience Role Overview We are looking for an experienced Senior Cloud Security Engineer with 7 years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps. This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication. Key Responsibilities Design and implement secure AWS cloud architectures. Establish and maintain AWS security best practices and security controls. Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls. Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints. Implement and manage AWS security services including: AWS IAM AWS KMS AWS CloudTrail Amazon GuardDuty AWS Security Hub AWS Config AWS WAF AWS Secrets Manager Monitor and investigate security events, threats and suspicious activities. Lead or participate in cloud security incident response and root-cause analysis. Conduct vulnerability assessments and coordinate remediation. Perform AWS security posture reviews and identify misconfigurations. Review cloud architectures and provide security recommendations. Implement encryption and data protection controls. Secure CI/CD pipelines and support DevSecOps practices. Review Infrastructure as Code for security risks. Implement security automation wherever possible. Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle. Establish security standards, policies and controls for AWS environments. Support compliance requirements and security audits. Mentor junior engineers and provide technical guidance. Mandatory Technical Skills Must Have 7 years of overall IT/Security/Cloud experience Strong AWS Cloud Security experience Hands-on AWS security architecture AWS IAM IAM policies, roles, permissions and least privilege AWS networking security VPC, Security Groups and NACLs CloudTrail and security logging GuardDuty Security Hub KMS and encryption Vulnerability management Cloud security monitoring Incident response Security hardening Security architecture/design Good to Have AWS Organizations / SCP Terraform / CloudFormation DevSecOps CI/CD security Docker/Kubernetes security SAST/DAST/SCA SIEM tools Python/Bash/PowerShell scripting CIS Benchmarks NIST ISO 27001 SOC 2 AWS security certifications