{"id":3026628,"url":"https://alion.io/job/ic-markets-senior-security-cloud-engineer","title":"Senior Security Cloud Engineer","company":{"id":4198,"name":"IC Markets","domain":"ic.com","url":"https://alion.io/company/ic-markets","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"A","score":95,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":97,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"AWS WAF","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"ISO 27001","optional":true},{"name":"MITRE ATT&CK","optional":true}],"status":"live","first_seen_at":"2026-10-21T19:14:33Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-24T09:14:14Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Role Overview\nWe are seeking a highly technical and experienced Senior Security Engineer - Cloud and Infrastructure to\nstrengthen security across IC’s Group cloud platforms, infrastructure and technology services.\nThe successful candidate will bring deep hands-on AWS expertise, strong systems, networking and\ninfrastructure security knowledge, and an automation mindset. They will lead cloud security architecture reviews,\nengineer security controls, automate security processes and work directly with technology teams to resolve\ncomplex security risks.\nThis is a senior individual contributor role with significant technical ownership. The primary focus is AWS\nsecurity, infrastructure and automation, complemented by vulnerability management, SOC improvement,\nincident investigation, and application and API security assessments.\nKey Responsibilities\nCloud Security, Architecture and Engineering\nLead security architecture reviews for new systems, significant changes and existing AWS, on-premises and\nhybrid environments.\nDesign, implement and validate AWS security controls across identity and access management, networking,\ncompute, storage, encryption, secrets management and logging.\nStrengthen security across AWS accounts through organisational policies, service control policies, secure\naccount structures and centralised security monitoring.\nIdentify and remediate excessive permissions, exposed resources, insecure configurations and attack paths\nacross cloud environments.\nAssess and improve container, Kubernetes and Amazon EKS security, including workload identities, network\naccess and runtime controls.\nReview network architectures and security controls, including segmentation, routing, firewalls, VPNs and\nconnectivity between cloud and on-premises environments.\nOptimise AWS WAF rules and policies using traffic analysis and security findings to strengthen protection and\nminimise false positives.\nWork closely with Cloud and Infrastructure and Platform Engineering teams to embed security into infrastructure\ndesign, deployment and operation.\nDefine reusable security architectures, hardening standards and secure configuration patterns, and verify their\neffectiveness through technical testing.\nKey Responsibilities continued\nAutomation, AI and Technical Leadership\nApply an automation mindset to security engineering, replacing repetitive manual activities with reliable, reusable\nworkflows.\nUse Terraform and Ansible to embed security controls into infrastructure provisioning, configuration\nmanagement and remediation.\nDevelop scripts and API integrations to automate security checks, vulnerability validation, evidence collection\nand reporting.\nIntegrate infrastructure-as-code scanning, policy validation and security checks into CI/CD pipelines.\nDesign automation with appropriate testing, exception handling, approval controls and rollback capabilities.\nApply AI-assisted tools to security analysis, investigation and engineering tasks, independently validating outputs\nand protecting sensitive information.\nAssess security risks introduced by AI services and integrations, including data exposure, prompt injection and\nexcessive permissions.\nMentor engineers, guide technical decisions and communicate security priorities clearly to technology teams and\nmanagement.\nVulnerability Management and Risk Analysis\nDrive vulnerability management across cloud platforms and supporting infrastructure, from discovery and\nvalidation through remediation and verified closure.\nPrioritise findings using exploitability, exposure, asset criticality, attack paths and potential business impact.\nWork with technology owners to agree remediation actions and timelines, escalating overdue or material risks.\nConduct technical risk assessments and explain treatment options, compensating controls and residual risk.\nAnalyse recurring findings and address their underlying causes through improvements to architecture,\ninfrastructure code and configuration standards.\nSOC Engineering and Incident Investigation\nImprove security telemetry, SIEM detections and investigation workflows across AWS, identity and infrastructure\nenvironments.\nInvestigate and respond to SIEM and Cloud Native Application Protection Platform (CNAPP) alerts, coordinate\nremediation, and fine-tune detection rules, policies and thresholds to improve alert quality and reduce false\npositives.\nEnsure relevant cloud activity and security events are captured, centralised and available for investigation.\nDevelop and tune detections for suspicious access, privilege escalation, configuration changes and other\nrelevant attack techniques.\nAutomate alert enrichment, investigation and response activities with appropriate approval controls.\nProvide senior technical expertise during complex cloud and infrastructure investigations, supporting\ncontainment and recovery.\nValidate detection coverage through controlled testing and translate incident findings into stronger preventive\nand detective controls.\nSecurity Assessments and Penetration Testing\nConduct end-to-end security assessments and penetration testing across AWS environments, infrastructure,\nweb applications and APIs, from scoping through reporting and retesting.\nIdentify exploitable misconfigurations, authentication and authorisation weaknesses, privilege escalation\nopportunities and attack paths across applications and cloud services.\nCombine architecture and configuration reviews with hands-on testing to assess security controls and business\nimpact.\nDocument findings with clear evidence and practical remediation guidance, working with Cloud, Development\nand Application Security teams to verify fixes.\nReview external assessment findings and coordinate remediation and retesting with relevant technology teams.\nRequired Experience and Technical Skills\nAt least 10 years of relevant professional experience across cybersecurity, cloud security and infrastructure\nsecurity, with substantial hands-on engineering responsibility.\nStrong hands-on AWS security and architecture expertise is mandatory, including IAM, AWS Organizations,\nservice control policies, VPC security, EC2, S3, KMS, secrets management, CloudTrail, GuardDuty, Security\nHub and AWS WAF, including rule optimisation and tuning.\nDemonstrated experience designing and implementing security controls across multi-account AWS\nenvironments.\nStrong understanding of networking and network security is mandatory, including TCP/IP, DNS, routing,\nswitching, subnetting, firewalls, VPNs, network segmentation and traffic analysis.\nCCNA certification is required as a minimum, or a higher-level relevant networking certification.\nHands-on experience with Terraform and Ansible, including developing and reviewing infrastructure definitions,\nconfiguration playbooks and automated remediation.\nStrong scripting skills in Python, PowerShell or Bash, with practical experience integrating tools through APIs.\nAn automation mindset, demonstrated through projects that improve security consistency, scalability and\noperational efficiency.\nPractical experience securing containers, Kubernetes and Amazon EKS, including workload permissions and\nruntime controls.\nExperience embedding security checks into infrastructure-as-code and CI/CD workflows.\nStrong knowledge of Windows, Linux, Active Directory and privileged access.\nExperience with vulnerability management, technical risk analysis and verification of remediation.\nPractical experience investigating and responding to SIEM and CNAPP alerts, including tuning detection rules,\npolicies and thresholds.\nExperience with cloud log analysis, detection engineering and incident investigation.\nPractical penetration testing experience across cloud and infrastructure, with working knowledge of web\napplication and API testing.\nUnderstanding of common OWASP vulnerabilities, authentication and authorisation controls, and\napplication-to-cloud security risks.\nPractical use of AI-assisted tools in security or engineering, with the ability to explain implemented use cases\nand validate results.\nStrong technical documentation and English communication skills, with the ability to work independently across\ngeographically distributed teams.\nDesirable Qualifications\nAWS Certified Security - Specialty and/or AWS Certified Solutions Architect - Professional are strongly preferred.\nAWS Certified Solutions Architect - Associate, Terraform Associate or relevant Kubernetes certifications are\nadvantageous.\nSecurity certifications such as OSCP, OSEP, GIAC, CISSP or CCSP are advantageous but are not required.\nExperience with cloud security posture management, cloud workload protection and policy-as-code.\nExperience with SOAR platforms, automated incident response or AI-enabled security workflows.\nExperience in financial services, trading platforms, fintech or other business-critical environments.\nFamiliarity with CIS Benchmarks, MITRE ATT&CK, OWASP, NIST and ISO 27001.\nDegree in Computer Science, Cybersecurity, Engineering or a related discipline, or equivalent practical\nexperience.\nPersonal Attributes\nStrong ownership, independent judgement and accountability for technical outcomes.\nA practical engineering approach with a preference for automation and sustainable solutions.\nAn investigative mindset and the ability to challenge assumptions with evidence.\nSound judgement when introducing changes or testing business-critical environments.\nA collaborative approach that balances security requirements with operational needs.\nDemonstrated technical capability, engineering outcomes and practical AWS expertise will carry greater weight\nthan certifications alone.","description_format":"text","description_chars":9621,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Financial Services","Forex & CFD Brokers"],"lifecycle":[{"event":"open","at":"2026-10-21T19:14:33Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":97,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/ic-markets-senior-security-cloud-engineer","json_url":"https://alion.io/job/ic-markets-senior-security-cloud-engineer.json","meta":{"generated_at":"2026-10-24T09:47:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14214,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4198},"rest":"https://alion.io/mcp/rest/get_company?id=4198"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fic-markets-senior-security-cloud-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fic-markets-senior-security-cloud-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fic-markets-senior-security-cloud-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ic-markets-senior-security-cloud-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fic-markets-senior-security-cloud-engineer"}]}