TECHNICAL LEAD - CLOUD SECURITY TECHNOLOGIES

Cloud Security Engineer Role Overview We are looking for a Cloud Security Engineer to strengthen and scale security across our AWS and GCP environments. The role will focus on reducing cloud risk, improving IAM governance, implementing security guardrails, and enhancing visibility through SentinelOne CNAPP and AI SIEM. Working closely with Cloud Security, Application Security, and Platform Engineering teams, you will drive practical, automation-first security solutions that improve security posture while supporting business agility. Key Responsibilities Cloud Security & Infrastructure Improve security posture across AWS and GCP environments. Identify and remediate cloud misconfigurations, risky exposures, and security gaps. Partner with engineering teams to implement sustainable security controls. CNAPP & Risk Management Manage and prioritize SentinelOne CNAPP findings. Focus on high-impact risks involving internet exposure, IAM, data access, and critical vulnerabilities. Improve signal quality by reducing false positives and alert fatigue. IAM Governance & Automation Build and automate IAM reviews across AWS and GCP. Monitor privileged access, stale credentials, trust relationships, and permission drift. Develop automated reporting to support governance and compliance. IaC & Security Guardrails Support Terraform security controls and policy enforcement. Implement guardrails for IAM, encryption, logging, and public exposure risks. Promote secure infrastructure patterns and reusable modules. Security Monitoring & Incident Response Ensure cloud logs are properly collected and available in SentinelOne AI SIEM. Develop dashboards and alerts for key security events. Support investigations, root cause analysis, and remediation activities. Compliance & Reporting Produce actionable cloud security posture reports. Support audits with evidence related to access control, encryption, logging, and governance. Required Qualifications Bachelor's degree in Cybersecurity, Computer Science, IT, or related field. 3-5+ years of experience in Cloud Security, Security Engineering, Infrastructure Security, or DevSecOps. Strong hands-on experience with AWS Security (IAM, networking, logging, KMS, encryption). Working knowledge of GCP, especially IAM and BigQuery security. Experience with CNAPP/CSPM platforms (SentinelOne preferred). Proficiency in scripting/automation using Python, Go, or Node.js. Hands-on experience with Terraform and Infrastructure-as-Code. Preferred Knowledge AWS IAM policies, roles, and trust relationships. GCP IAM, service accounts, and BigQuery governance. Cloud attack paths, privilege escalation, credential abuse, and data exfiltration risks. Cloud logging, monitoring, and incident response practices. Familiarity with Cloudflare security solutions (WAF, WARP) is an advantage. What We're Looking For Self-driven and capable of working independently. Strong analytical and problem-solving skills. Ability to translate security findings into actionable recommendations. Effective communicator who can engage with both technical and non-technical stakeholders. Collaborative team player comfortable working across multiple teams and time zones.