5 days ago
Mumbai, India or Bengaluru, IndiaSenior
Responsibilities
- Design, build, and secure AWS platform infrastructure using Terraform and CloudFormation.
- Develop event-driven security architectures with EventBridge, Lambda, and Systems Manager for automated findings routing and remediation.
- Integrate Security Hub and GuardDuty with Jira to automate environment-aware ticket creation and routing.
- Enforce tagging governance through authoring, build, API, and runtime controls across AWS environments.
- Secure the AWS account-vending process with inherited security baselines, delegated administration, and suppression rules.
- Implement centralized network security controls using AWS Firewall Manager and Terraform.
- Build secure CI/CD reference pipelines with static analysis and security-scanning gates.
- Automate continuous security assessments using Security Hub, AWS Config, and AWS Security Agent.
- Manage AWS Config conformance packs and Security Hub standards across Commercial and GovCloud partitions.
- Support incident response and automated triage for GuardDuty and Security Hub findings.
- Collaborate with platform, network engineering, and security operations teams on architecture patterns, exceptions, and remediation SLAs.
Requirements
- 7+ years of overall AWS cloud platform or infrastructure engineering experience.
- 3–5 years of experience specifically focused on cloud security and automation.
- Deep hands-on knowledge of AWS Security Hub, GuardDuty, AWS Config, IAM, KMS, and AWS Firewall Manager.
- Strong expertise with AWS Organizations, Service Control Policies, Tag Policies, and delegated administrator models.
- Hands-on experience with EventBridge, Lambda, Systems Manager documents, and event-driven security remediation.
- High proficiency in Python with Boto3 and Bash.
- Strong experience writing and managing Terraform and AWS CloudFormation infrastructure.
- Experience building secure pipelines and integrating Checkov, tfsec, cfn-lint, and Conftest.
- Experience securing AWS Commercial and AWS GovCloud environments.
- Familiarity with FedRAMP, NIST 800-53, CIS Benchmarks, and AWS Foundational Security Best Practices.
- Experience automating Jira workflows through APIs or webhooks from AWS services.
- Understanding of cloud security models, zero-trust principles, least privilege, encryption, and network security fundamentals.
- Preferred experience includes multi-cloud security, ECS or EKS container security, Sumo Logic, Splunk, Datadog, Macie, Detective, Azure AD, Okta, SOAR, and security incident management.
- Additional preferred certifications include CISSP, CISM, CCSP, or AWS Security Specialty.
- Strong communication and collaboration skills for working across engineering, finance, and security teams.
Benefits
- Hybrid work arrangement in Mumbai or Bangalore, India.
- Culture emphasizing transparency, diversity, integrity, learning, innovation, and professional growth.
Tech Stack
About Quantiphi
Quantiphi is an AI-first digital engineering and consulting firm that designs and implements machine learning, data, and cloud solutions for large enterprises across industries. Its teams build production systems—such as generative AI applications, computer vision, and predictive analytics—primarily on Google Cloud and other hyperscalers, delivered as professional services and managed solutions. Founded in 2013 and headquartered in Marlborough, Massachusetts, the company is privately held and a Google Cloud partner.