Senior Cloud Security Engineer – AWS

Company DescriptionAppiness Interactive Pvt. Ltd. is a Bangalore-based product development and UX firm that specializes in digital services for startups to fortune-500s. We work closely with our clients to create a comprehensive soul for their brand in the online world, engaged through multiple platforms of digital media. Our team is young, passionate, and aggressive, not afraid to think out of the box or tread the un-trodden path in order to deliver the best results for our clients. We pride ourselves on Practical Creativity where the idea is only as good as the returns it fetches for our clients.Role OverviewWe are looking for an experienced Senior Cloud Security Engineer with 7+ years of experience, including strong hands-on expertise in AWS Cloud Security. The candidate will be responsible for designing, implementing, assessing, and continuously improving security across AWS cloud environments. The role requires strong knowledge of cloud security architecture, IAM, network security, threat detection, vulnerability management, incident response, security monitoring, encryption, and DevSecOps.This is a highly technical position. Hands-on technical expertise will be given significantly more importance than communication skills. Good written and verbal communication is sufficient.Key ResponsibilitiesDesign and implement secure AWS cloud architectures.Establish and maintain AWS security best practices and security controls.Implement IAM, RBAC, least-privilege access, MFA, federation and privileged access controls.Secure AWS networking including VPCs, Security Groups, NACLs, routing, private/public subnets and VPC endpoints.Implement and manage AWS security services including:AWS IAMAWS KMSAWS CloudTrailAmazon GuardDutyAWS Security HubAWS ConfigAWS WAFAWS Secrets ManagerMonitor and investigate security events, threats and suspicious activities.Lead or participate in cloud security incident response and root-cause analysis.Conduct vulnerability assessments and coordinate remediation.Perform AWS security posture reviews and identify misconfigurations.Review cloud architectures and provide security recommendations.Implement encryption and data protection controls.Secure CI/CD pipelines and support DevSecOps practices.Review Infrastructure as Code for security risks.Implement security automation wherever possible.Work with engineering, DevOps and infrastructure teams to embed security into the development lifecycle.Establish security standards, policies and controls for AWS environments.Support compliance requirements and security audits.Mentor junior engineers and provide technical guidance.Mandatory Technical SkillsMust Have7+ years of overall IT/Security/Cloud experienceStrong AWS Cloud Security experienceHands-on AWS security architectureAWS IAMIAM policies, roles, permissions and least privilegeAWS networking securityVPC, Security Groups and NACLsCloudTrail and security loggingGuardDutySecurity HubKMS and encryptionVulnerability managementCloud security monitoringIncident responseSecurity hardeningSecurity architecture/designGood to HaveAWS Organizations / SCPTerraform / CloudFormationDevSecOpsCI/CD securityDocker/Kubernetes securitySAST/DAST/SCASIEM toolsPython/Bash/PowerShell scriptingCIS BenchmarksNISTISO 27001SOC 2AWS security certifications