Senior Engineer - Cloud Security
First seen by Alion on Oct 30, 2026.
What Success Looks Like (Objectives):
We are seeking a highly skilled AWS Senior Security Engineer to join our cloud security team. In this role, you will design, deploy, and maintain robust security controls across our Amazon Web Services (AWS) infrastructure. You will focus on Cloud Security Posture Management (CSPM), identity and access management, AI-driven automation and security implementation, and broad-spectrum architectural security across all core AWS services-ensuring our cloud workloads remain resilient against emerging threats while enabling rapid business growth.
Key Responsibilities
- Implement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub, etc) to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.
- Establish baseline security practices across the breadth of AWS services (Compute, Storage, Database, Serverless, Networking, Messaging, and Governance) to guarantee defense-in-depth across the entire AWS ecosystem.
- Evaluate, integrate, and operationalize AI/ML capabilities (e.g., AWS Bedrock, Amazon Q, SageMaker, LLM security practices) to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.
- Architect, enforce, and audit fine-grained IAM policies, Service Control Policies (SCPs), role hierarchies, and temporary credentials adhering strictly to the principle of least privilege and CIEM principles.
- Configure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager. Maintain secure VPC network architectures, security groups, Network ACLs, and AWS WAF configurations.
- Monitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config. Build automated incident response playbooks using EventBridge, Lambda, and SOAR tools to contain security incidents instantly.
- Integrate security scanning tools (SAST/DAST, dependency scanning, secret detection) directly into CI/CD deployment pipelines. Write and maintain Infrastructure-as-Code (IaC) using Terraform or AWS CloudFormation.
- Ensure multi-account cloud operations meet industry security standards (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) using AWS Control Tower and AWS Config rules.
Core Skills, Competencies, and Key Experiences (What you'll bring)
- Strong hands-on experience with enterprise CSPM platforms (Prisma Cloud, Wiz, AWS Security Hub, AWS Config) for continuous risk assessment, misconfiguration detection, and compliance tracking.
- In-depth architectural security understanding of core and advanced AWS services, including EC2, S3, RDS, DynamoDB, Lambda, ECS/EKS, VPC, Transit Gateway, Route 53, SNS/SQS, KMS, and IAM.
- Solid understanding of AI/ML fundamentals and practical experience applying generative AI/LLM models or AWS AI services (Bedrock, SageMaker, Amazon Q) to automate security analysis, triage, and security operations.
- Deep mastery of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and Cloud Infrastructure Entitlement Management (CIEM) principles.
- Strong knowledge of VPC design, Subnets, Transit Gateway, Security Groups, Network ACLs, AWS WAF, and Shield.
- Proficiency with Terraform, CloudFormation, Python, or Boto3 for automating security controls and remediation workflows.
- Must have 5+ years of dedicated experience in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS, GCP environments.
- Proven ability to communicate security risks effectively and partner with developer teams to resolve issues without creating operational friction.
- Demonstrated track record of conducting post-incident root-cause analysis and driving continuous improvement.
Preferred Certifications
- AWS Certified Security - Specialty
- AWS Certified Solutions Architect - Associate or Professional
- ISC2 Certified Cloud Security Professional (CCSP)
- GIAC Cloud Security Automation (GCSA) / CISSP
About our Department
Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.
About Our Company
DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.
Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).
Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.
EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.
Benefits
- Insurance and Wellbeing
- Financial & Retiral Benefit Program
- Mental Wellbeing
- Employee Stock Purchase Program (ESPP)
- Professional Development Reimbursement
- Time Off
- Team Outings
We pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.
EchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to makeandaccessible to users. Please [HIDDEN TEXT] you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only do not use this contact information to inquire about the status of applications.
Click the links to access the following statements:,, EEOC Know Your Rights (/)