Cloud Security Engineer

Stack: AWS-first; exposure to Cloudflare WAF/Bot Mgmt and CI/CD

Design, implement and automate guardrails for secure AWS workloads  preventive and detective controls, harden services, and integrate with SOC for telemetry and response.

• Governance & IAM: SCPs, least privilege IAM, Identity Center/SSO, break-glass, key rotation.
• Logging/Detection:
  Org Cloud Trail, centralized log archive, Security Hub, Guard Duty, Access Analyzer, Config rules.
• Perimeter:
  Cloud Front + AWS WAF rulesets/bot management; rate limiting, geo/IP policies; integration with Cloudflare (if used).
• IaC & Pipelines:
  Terraform modules, drift detection, pre-commit checks, policy-as-code, automated remediation.
• Evidence & Compliance: ISO 27001/27701, DPDP, RBI Outsourcing—dashboards and audit artifacts.

• Strong AWS architecture and hands‑on security configuration across core services.
• Terraform proficiency and Git‑based CI/CD; ability to codify guardrails.
• SIEM/SOC integrations and detections for cloud events.

• AWS Security Specialty, CCSK, Terraform Associate; exposure to serverless and data lake controls.
• Threat modeling, incident support, and blue/ purple-team collaboration.

• % compliant resources, mean time to remediate misconfig, audit issues closed on time, drift reduction.