Cloud Security Engineer
First seen by Alion on Oct 1, 2026.
Key Roles & Responsibilities :
- Architecture & Design : Design, build, and deploy secure, scalable, and resilient cloud infrastructures across public cloud platforms (AWS, OCI).
- Identity & Access Management (IAM) : Design and manage robust cloud IAM policies, ensuring the principle of least privilege is strictly enforced across all environments.
- DevSecOps Integration : Integrate security tools and automated vulnerability scanning (SAST/DAST, SCA) directly into CI/CD pipelines. Implement Infrastructure as Code (IaC) security scanning (CSPM).
- Security Automation & Incident Response : Develop automated scripts and workflows to detect, alert, and remediate cloud security misconfigurations and threats in real-time. Assist the SOC team with cloud-specific incident investigation and forensics.
- Vulnerability & Threat Management : Conduct regular cloud security assessments, threat modeling, and configuration audits. Monitor and manage security alerts from CNAPP, CSPM, and CWPP platforms.
- Compliance & Governance : Ensure cloud infrastructure meets regulatory standards (SOC 2, ISO 27001, PCI-DSS, DPDP). Implement and monitor adherence to CIS Benchmarks.
- Collaboration & Mentorship : Partner with engineering teams to provide security guidance during the software development lifecycle (SDLC). Conduct security awareness training regarding cloud best practices for internal teams.
Technical Requirements :
- Experience : 3 - 5+ years of dedicated experience in cloud security engineering, cybersecurity, or systems/DevOps engineering with a heavy focus on cloud security.
- Cloud Platform Expertise : Hands-on experience securing at least one major cloud provider (AWS, Azure, GCP), with a strong preference for multi-cloud experience.
- Infrastructure as Code (IaC) : Proficiency with IaC tools like Terraform, CloudFormation, or Ansible, and experience securing them.
- Container & Orchestration Security : Strong understanding of securing containerized workloads (Docker) and orchestration platforms (Kubernetes/EKS/AKS/GKE).
- Programming/Scripting : Proficiency in at least one scripting or programming language (e.g., Python, Bash, Go, PowerShell) for security automation.
- Security Tools : Experience with cloud security tools such as AWS Security Hub, Azure Defender, OCI cloud guard, Aqua Security, or open-source equivalents.
- Networking : Deep understanding of cloud networking concepts (VPCs, VNet peering, Firewalls, WAF, Load Balancers, VPNs, and Zero Trust architecture).
Education :
- Bachelor's degree - BTech or equivalent.
Skills
Cloud Security, AWS, IAC Terraform, Kubernetes, Python, Cyber Security, Bash Scripting, Vulnerability Assessment, SAST, DAST