{"id":3568911,"url":"https://alion.io/job/dish-wireless-senior-engineer-cloud-security","title":"Senior Engineer - Cloud Security","company":{"id":179411,"name":"DISH Wireless","domain":"dish.com","url":"https://alion.io/company/dish-wireless","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":41000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":168},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon EventBridge","optional":false},{"name":"Amazon S3","optional":false},{"name":"Amazon SageMaker","optional":false},{"name":"AWS","optional":false},{"name":"AWS Bedrock","optional":false},{"name":"AWS Lambda","optional":false},{"name":"AWS WAF","optional":false},{"name":"Boto3","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Defense in Depth","optional":false},{"name":"DynamoDB","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"PCI DSS","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-30T19:53:15Z","employer_posted_date":null,"last_verified_at":"2026-10-30T19:53:15Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"What Success Looks Like (Objectives): \n\nWe are seeking a highly skilled AWS Senior Security Engineer to join our cloud security team. In this role, you will design, deploy, and maintain robust security controls across our Amazon Web Services (AWS) infrastructure. You will focus on Cloud Security Posture Management (CSPM), identity and access management, AI-driven automation and security implementation, and broad-spectrum architectural security across all core AWS services-ensuring our cloud workloads remain resilient against emerging threats while enabling rapid business growth.\nKey Responsibilities\nImplement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub, etc) to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.\nEstablish baseline security practices across the breadth of AWS services (Compute, Storage, Database, Serverless, Networking, Messaging, and Governance) to guarantee defense-in-depth across the entire AWS ecosystem.\nEvaluate, integrate, and operationalize AI/ML capabilities (e.g., AWS Bedrock, Amazon Q, SageMaker, LLM security practices) to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.\nArchitect, enforce, and audit fine-grained IAM policies, Service Control Policies (SCPs), role hierarchies, and temporary credentials adhering strictly to the principle of least privilege and CIEM principles.\nConfigure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager. Maintain secure VPC network architectures, security groups, Network ACLs, and AWS WAF configurations.\nMonitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config. Build automated incident response playbooks using EventBridge, Lambda, and SOAR tools to contain security incidents instantly.\nIntegrate security scanning tools (SAST/DAST, dependency scanning, secret detection) directly into CI/CD deployment pipelines. Write and maintain Infrastructure-as-Code (IaC) using Terraform or AWS CloudFormation.\nEnsure multi-account cloud operations meet industry security standards (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) using AWS Control Tower and AWS Config rules.\n\n Core Skills, Competencies, and Key Experiences (What you'll bring)\n\nStrong hands-on experience with enterprise CSPM platforms (Prisma Cloud, Wiz, AWS Security Hub, AWS Config) for continuous risk assessment, misconfiguration detection, and compliance tracking.\nIn-depth architectural security understanding of core and advanced AWS services, including EC2, S3, RDS, DynamoDB, Lambda, ECS/EKS, VPC, Transit Gateway, Route 53, SNS/SQS, KMS, and IAM.\nSolid understanding of AI/ML fundamentals and practical experience applying generative AI/LLM models or AWS AI services (Bedrock, SageMaker, Amazon Q) to automate security analysis, triage, and security operations.\nDeep mastery of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and Cloud Infrastructure Entitlement Management (CIEM) principles.\nStrong knowledge of VPC design, Subnets, Transit Gateway, Security Groups, Network ACLs, AWS WAF, and Shield.\nProficiency with Terraform, CloudFormation, Python, or Boto3 for automating security controls and remediation workflows.\nProfessional Experience & Soft SkillsMust have 5+ years of dedicated experience in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS, GCP environments.\nProven ability to communicate security risks effectively and partner with developer teams to resolve issues without creating operational friction.\nDemonstrated track record of conducting post-incident root-cause analysis and driving continuous improvement.\nPreferred Certifications\nAWS Certified Security - Specialty\nAWS Certified Solutions Architect - Associate or Professional\nISC2 Certified Cloud Security Professional (CCSP)\nGIAC Cloud Security Automation (GCSA) / CISSP\n\nAbout our Department\n\nOur Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.\n\nAbout Our Company\n\nDISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.\n\nOur product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).\n\nOur facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.\n\nEchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.\n\nBenefits\n\nInsurance and Wellbeing\nFinancial & Retiral Benefit Program\nMental Wellbeing\nEmployee Stock Purchase Program (ESPP)\nProfessional Development Reimbursement\nTime Off\nTeam Outings\n\nWe pride ourselves on developing and promoting talent as an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. EchoStar will accommodate the sincerely held religious beliefs of employees if such accommodations are not undue hardships and are otherwise within the bounds of applicable law. All qualified applicants with arrest or conviction records will be considered for employment in accordance with local, state, and federal law. You may redact any information that identifies age, date of birth, or dates of school/graduation from your application documents before submission and throughout our application process.\n\nEchoStar will provide reasonable accommodation to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so poses an undue hardship on the Company, poses a direct threat of substantial harm to others, or is otherwise not required by law. EchoStar has a more detailed Accommodation Policy that applies to employees. EchoStar endeavors to makeandaccessible to users. Please [HIDDEN TEXT] you would like to discuss the accessibility of our website or need assistance completing the application process. This contact information is for accommodation requests only do not use this contact information to inquire about the status of applications.\n\nClick the links to access the following statements:,, EEOC Know Your Rights (/)","description_format":"text","description_chars":7081,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Internet Service Providers","Mobile Networks"],"lifecycle":[{"event":"open","at":"2026-10-31T14:09:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":29,"reasons":["seen:3","velocity","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/dish-wireless-senior-engineer-cloud-security","json_url":"https://alion.io/job/dish-wireless-senior-engineer-cloud-security.json","meta":{"generated_at":"2026-11-03T19:04:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1078,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179411},"rest":"https://alion.io/mcp/rest/get_company?id=179411"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdish-wireless-senior-engineer-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdish-wireless-senior-engineer-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdish-wireless-senior-engineer-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dish-wireless-senior-engineer-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdish-wireless-senior-engineer-cloud-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3568911}},{"tool":"search_jobs","arguments":{"company":"dish.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3568911},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}