cloud security engineer

What is CRED?

CRED is an exclusive community for India’s most trustworthy and CREDitworthy individuals, where the members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long lost virtue, one of trust, the idea being to create a community centered around this virtue. a community that constantly strives to become more virtuous in this regard till they finally scale their behavior to create a utopia where being trustworthy is the norm and not the exception. to build a community like this requires a community of its own; a community special in its own way, working towards making this vision come true

here’s a thought experiment: what do you get when you put a group of incredibly passionate and driven people and entrust them with the complete freedom to chase down their goals in a completely uninhibited manner? answer: you get something close to what we have at CRED; CRED just has it better

what you will do:

• work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security
• identify security issues (internal and external), work with stakeholders on mitigation, and design/implement solutions for complex security problems in aws-based systems
• own and continuously improve the cloud security posture management (cspm) program aligned with standards like nist 800-53 and iso 27001
• own the cloud workload protection program, including alert investigation and triage
• drive the data security charter, including data classification, masking, and securing large-scale data stores
• automate infrastructure security and build security tooling to reduce manual effort
• conduct security design, infrastructure, and architecture reviews
• build, operate, and maintain cloud security platforms to enhance prevention, detection, and response
• translate product requirements into threat models and identify security risks
• build in-house security frameworks to strengthen security culture across tech teams
• enable compliance across teams (pci dss, iso 27001, dpdpa) and promote best practices
• drive security awareness and engineering maturity across the organisation

you should apply if you have:

• 2-6 years of experience in information security Solid fundamentals on computer networks, operating systems (linux), containers and secure cloud architecture
• strong programming skills in python, go, or bash
• solid understanding of cloud security with hands-on experience in aws / gcp / azure
• experience building and automating custom security tools
• understanding of microservices, ci/cd pipelines, containers, and securing containerised workloads
• strong grasp of core security principles like least privilege, defence-in-depth, and zero trust
• a data-driven mindset with the ability to influence stakeholders
• security projects on github or technical blogs
• strong communication skills and the ability to be a go-to security partner for engineers and product teams
• a proactive approach to staying updated on security threats, breaches, tools, and research
• basic understanding of llms, mcp, and ai agents and Interest in building ai-driven security workflows.
• familiarity with vulnerability management, patching cycles, and cvss