Senior Cloud Security Engineer

As a Senior Cloud Security Engineer at Pega, you will play a critical role in protecting our cloud platforms, applications, and infrastructure at scale. You will focus on building security-first solutions across AWS/GCP, Kubernetes environments, and endpoint detection platforms, while driving automation through modern engineering practices.

Responsibilities:

• Design and implement cloud-native security controls across AWS and GCP, leveraging services such as IAM, GuardDuty, AWS Config and GCP SCC.
• Build and operate Security as a Service platforms to enable scalable, reusable security capabilities as part of provisioning.
• Develop automation/service using Golang and Python to improve Pega Cloud security posture.
• Deploy, integrate, and optimise EDR/XDR solutions (Trend Micro, CrowdStrike) to enhance endpoint and workload protection.
• Secure and operate containerised workloads and Kubernetes environments, ensuring best practices in runtime protection and network controls.
• Configure security alerts, investigate incidents, and lead response activities across cloud and endpoint environments.
• Define and maintain security policies, standards, and guardrails aligned to DevSecOps and enterprise security frameworks.
• Collaborate with engineering teams to embed security into CI/CD pipelines and SDLC processes
• Solve complex security challenges and drive end-to-end implementation of scalable solutions.
• Stay current on emerging threats, vulnerabilities, and industry best practices in cloud and endpoint security.

Requirements:

• Strong expertise in AWS security services (IAM, VPC security, GuardDuty, Security Hub, Config, etc. ) and working knowledge of GCP security.
• Hands-on experience with EDR/XDR tools such as Trend Micro or CrowdStrike for threat detection and response.
• Solid experience securing Kubernetes and container platforms (runtime security, network policies, image scanning).
• Proficient in development and scripting using Golang and Python, with a strong focus on security automation.
• Experience with Infrastructure-as-Code tools like Terraform and CloudFormation.
• Familiarity with security tooling, including vulnerability scanners, CSPM, storage scanning, and continuous monitoring solutions.
• Strong understanding of DevSecOps, CI/CD pipelines (Jenkins, Git, etc. ), and secure SDLC practices.
• Good knowledge of Linux systems, networking, and cloud-native architectures
• Strong analytical mindset with excellent collaboration and communication skills.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• 4+ years of experience in cloud security engineering, with strong exposure to AWS (and/or GCP).
• Proven experience working with EDR/XDR platforms (Trend Micro, CrowdStrike or similar).
• Hands-on experience in cloud security engineering, Kubernetes security, and container ecosystems.
• Strong programming and automation skills using Golang and Python.
• Experience integrating security into DevOps pipelines and CI/CD workflows.
• Experience building or integrating systems using APIs and microservices architectures.
• Experience with infrastructure automation (Terraform, CloudFormation).

Desired Qualifications:

• Familiarity with AI-assisted development tools and platforms (e. g., GitHub Copilot, Claude Code, or similar) to improve productivity, code quality, and security automation.
• Experience with SIEM/log management platforms and security analytics.
• Exposure to advanced detection engineering, threat hunting, or security automation frameworks.
• Certifications such as AWS Security Speciality, CCSP, or GCP Professional Cloud Security Engineer.
• Awareness of compliance frameworks and security governance standards.