Sr. Cloud Security Engineer

Company Description

Technology is our how. And people are our why. For over two decades, we have been harnessing technology to drive meaningful change.
 
By combining world-class engineering, industry expertise and a people-centric mindset, we consult and partner with leading brands from various industries to create dynamic platforms and intelligent digital experiences that drive innovation and transform businesses.
 
From prototype to real-world impact - be part of a global shift by doing work that matters.

Job Description

• Evaluate and integrate security tools (e.g., SCA, SAST, secrets scanning, CSPM, SSPM) through proof-of-concept (PoC) testing and hands-on validation.
• Engage with client stakeholders to provide expert guidance on cloud and application security best practices.
• Define and enforce OPA policies to block insecure Terraform deployments in the CI/CD process.
• Build and maintain dashboards within security tooling to highlight cloud security risks and sensitive data exposure.
• Interpret and communicate findings from security reports to both technical and non-technical stakeholders to highlight business impact and drive remediation.

Qualifications

Required

• Strong hands-on experience with AWS cloud platform
• Strong hands-on experience with Terraform for IaC.
• Strong hands-on experience with GitHub Actions for CI/CD automation
• Demonstrated understanding of key security domains: SCA, SAST, CSPM, SSPM, Secret Scanning
• Ability to clearly articulate the purpose and use cases for these security tools to both technical teams and client stakeholders.
• Remediate cloud misconfigurations by collaborating with service owners and modifying IaC definitions.
• Evaluate and integrate security tools (SCA, SAST, secrets scanning, SSPM) through PoCs and hands-on testing.
• Develop GitHub Actions and workflow templates to automate security scans for projects written in multiple programming languages.
• Identify accountable teams for legacy or orphaned cloud resources and ensure remediation paths are clearly owned.
• Proven experience operating inside corporate security teams
• Excellent stakeholder and expectation management.

Desired:

• Experience with Kubernetes and Argo CD
• Familiarity with security and policy enforcement tools such as:  OPA, AWS Config / SCP, TruffleHog, Endor Labs, Scalr, Cyera, Noname Security (now Akamai)
• Prior experience building security dashboards or integrating security reporting into engineering workflows.

Additional Information

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;   
• Career Development: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;
• Learning Opportunities: Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;
• Work-Life Balance: Hybrid work and flexible working hours, employee assistance programme;
• Health: Global internal wellbeing programme, access to wellbeing apps;
• Community: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.

Additional Employee Requirements  

• Participation in both internal meetings and external meetings via video calls, as necessary. 
• Ability to go into corporate or client offices to work onsite, as necessary. 
• Prolonged periods of remaining stationary at a desk and working on a computer, as necessary. 
• Ability to bend, kneel, crouch, and reach overhead, as necessary. 
• Hand-eye coordination necessary to operate computers and various pieces of office equipment, as necessary. 
• Vision abilities including close vision, toleration of fluorescent lighting, and adjusting focus, as necessary. 
• For positions that require business travel and/or event attendance, ability to lift 25 lbs, as necessary. 
• For positions that require business travel and/or event attendance, a valid driver’s license and acceptable driving record are required, as driving is an essential job function.

*If requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.   

USA Benefits (Full time roles only, does not apply to contractor positions)

• Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and vari