2 years ago
Hyderābād, IndiaMid Level / Senior
Responsibilities
- Perform security posture assessments across AWS, Azure, and GCP and identify cloud misconfigurations and deviations from security baselines.
- Conduct IAM, SSO, privileged-access, and access-governance reviews.
- Assess publicly exposed cloud resources, network configurations, cloud services, and edge-security controls.
- Integrate SAST, SCA, secrets scanning, IaC scanning, container/image scanning, DAST, and software supply-chain controls into CI/CD pipelines.
- Review Terraform and other infrastructure-as-code implementations for security.
- Assess Kubernetes clusters, RBAC, workloads, images, containers, hardening, and security posture.
- Validate vulnerabilities and security findings, prioritize remediation, and drive issues through closure with technical teams.
- Develop security automation using Python, Bash, cloud APIs, and command-line tools.
- Monitor CloudSEK alerts, investigate cloud and security events, and coordinate blocking, remediation, or escalation.
- Participate in cloud architecture reviews, security assessments, vulnerability management, incident investigations, audits, and compliance activities.
- Develop and maintain security standards, hardening guidelines, assessment methodologies, documentation, and operational runbooks.
Requirements
- 3–6 years of relevant experience in Cloud Security, DevSecOps, Infrastructure Security, Platform Security, or related security engineering roles.
- Strong hands-on experience with cloud security, infrastructure security, vulnerability management, and security automation.
- Strong hands-on understanding of at least one major public cloud platform, preferably AWS, with working knowledge of Azure and/or GCP advantageous.
- Knowledge of IAM, compute, storage, networking, encryption, logging, monitoring, least privilege, MFA, privileged access, credential management, and access governance.
- Experience with CI/CD security, Kubernetes, Docker, container security, cluster hardening, Terraform, and infrastructure-as-code security.
- Experience with CI/CD platforms such as Jenkins, GitHub Actions, ArgoCD, or Bitbucket Pipelines.
- Experience with Python, Bash, or similar scripting languages.
- Understanding of CSPM, KSPM, CWPP, CNAPP, vulnerability management, risk-based remediation, and security incident investigation.
- Knowledge of security frameworks and standards including CIS, NIST, PCI DSS, ISO 27001, and OWASP.
- Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline, or equivalent relevant industry experience.
- Relevant certifications such as AWS Certified Security – Specialty, AWS Solutions Architect, Certified Kubernetes Security Specialist, Microsoft Azure Security Engineer, or Google Professional Cloud Security Engineer are advantageous.
Tech Stack
Categories
About Zeta
Zeta builds a cloud‑native, API‑first banking platform that covers issuer processing, core banking, and digital banking for banks, credit unions, and fintechs. It sells enterprise software and services that help institutions launch and manage cards, loans, and deposit products. Founded in 2015 and headquartered in San Francisco, the privately held company powers programs across multiple countries, with customers having issued over 25 million cards on its platform.