Cloud Security Engineer at Renmoney

The Role

• The Cloud Security Engineer is responsible for designing, implementing, and managing security controls across the organization’s cloud environments.
• The role ensures secure architectures, proactive threat detection, and continuous compliance across AWS, Azure, GCP, and cloud-native technologies.

What You Will Do
Cloud Security Architecture & Engineering:

• Design and implement secure cloud architectures for IaaS, PaaS, and SaaS platforms (AWS, Azure, GCP).
• Implement Zero Trust principles, network segmentation, and secure landing zones.
• Define and enforce cloud security baselines, hardening standards, and configuration policies.

Cloud Security Operations:

• Manage cloud-native security tools (AWS Security Hub, GuardDuty, Azure Defender, GCP Security Command Center).
• Monitor and remediate misconfigurations using CSPM and CIEM solutions.
• Conduct continuous security assessments and vulnerability remediation on cloud assets.
• Support DevOps pipelines by integrating security tools (SAST and DAST).

Identity & Access Management:

• Implement and manage identity controls such as IAM, RBAC, MFA, and conditional access policies.
• Review and enforce least privilege access for users, applications, and services.

Threat Detection & Incident Response:

• Analyze cloud-specific security alerts, investigate suspicious activities, and respond to incidents.
• Support threat hunting and logging activities using SIEM/SOAR platforms.
• Develop runbooks and playbooks for cloud-related incidents.

Compliance & Governance:

• Ensure cloud environments meet internal security policies, regulatory requirements, and frameworks such as ISO 27001, PCI DSS, CIS Benchmarks, NIST CSF.
• Conduct periodic cloud compliance audits and provide remediation guidance.

Documentation & Collaboration:

• Create and maintain security documentation including architecture diagrams, SOPs, and hardening guides.
• Work closely with DevOps, Networking, Infrastructure, and other teams to ensure secure deployment of cloud workloads.
• Train and guide technical teams on cloud security best practices.

Requirements
What You Bring:

• Bachelor’s Degree in Computer Science, Information Security, Engineering, or related field.
• 5–7 years hands-on experience in cloud engineering or cloud security.
• Strong experience with at least one major cloud platform (AWS, Azure, or GCP).
• Experience with cloud security tools: CSPM, WAF, API Gateway security, Firewalls, and vulnerability scanners.
• Solid understanding of networking concepts: VPC, subnets, VPN, firewalls, routing, DNS, load balancing.
• Experience with security frameworks such as ISO 27001, NIST, CIS, and PCI DSS.

Preferred Certifications (Any 3 of the following):

• AWS Certified Security – Specialty
• Microsoft Azure Security Engineer (AZ-500)
• Google Professional Cloud Security Engineer
• CISSP, CISM, CCSP, CEH
• CompTIA Security+, Cloud+

Key Skills:

• Cloud architecture and security hardening
• Identity and Access Management
• Threat detection and incident response
• Container and Kubernetes security
• Strong analytical and troubleshooting skills
• Excellent communication and documentation skills.

Benefits
What’s In It For You:

• Competitive compensation and performance-driven rewards.
• Opportunity to work with modern cloud security technologies across AWS, Azure, and GCP.
• A collaborative and high-impact engineering environment.
• Professional development support, including certifications and specialized security training.
• Exposure to advanced cloud architectures, DevSecOps practices, and enterprise-scale security programs.
• A culture that values innovation, ownership, and continuous improvement.