Senior Engineer - Cloud Security
DISH Network2 days ago
Bengaluru, IndiaSenior
Responsibilities
- Implement and manage CSPM tools across multi-account environments to monitor misconfigurations, compliance posture, and risk.
- Establish defense-in-depth security practices across AWS compute, storage, database, serverless, networking, messaging, and governance services.
- Apply AI/ML and generative AI capabilities to automate security workflows, incident response, threat intelligence, and protection of AI pipelines.
- Architect and audit IAM policies, Service Control Policies, role hierarchies, temporary credentials, and CIEM controls using least privilege.
- Configure encryption and secrets management with AWS KMS, Secrets Manager, and Certificate Manager.
- Maintain secure VPC architectures, security groups, Network ACLs, AWS WAF, and related network controls.
- Monitor security logs using CloudTrail, GuardDuty, Security Hub, and AWS Config.
- Build automated incident response playbooks with EventBridge, Lambda, and SOAR tools.
- Integrate SAST, DAST, dependency scanning, and secret detection into CI/CD pipelines.
- Maintain infrastructure-as-code with Terraform or AWS CloudFormation.
- Ensure multi-account cloud operations meet SOC 2, ISO 27001, HIPAA, and PCI-DSS security standards.
- Conduct post-incident root-cause analysis and partner with developer teams to resolve security issues.
Requirements
- At least 5 years of dedicated experience in cloud security or cybersecurity engineering.
- At least 3 years of experience explicitly focused on AWS and GCP environments.
- Strong hands-on experience with CSPM platforms including Prisma Cloud, Wiz, AWS Security Hub, and AWS Config.
- Deep architectural security knowledge of AWS services including EC2, S3, RDS, DynamoDB, Lambda, ECS, EKS, VPC, Transit Gateway, Route 53, SNS, SQS, KMS, and IAM.
- Practical experience applying generative AI, LLM models, or AWS AI services such as Bedrock, SageMaker, and Amazon Q to security operations.
- Strong knowledge of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and CIEM principles.
- Strong knowledge of VPC design, subnets, Transit Gateway, security groups, Network ACLs, AWS WAF, and Shield.
- Proficiency with Terraform, CloudFormation, Python, or Boto3 for security automation and remediation.
- Ability to communicate security risks effectively and collaborate with developer teams.
- Preferred certifications include AWS Certified Security - Specialty, AWS Certified Solutions Architect, ISC2 CCSP, GIAC Cloud Security Automation, and CISSP.
Tech Stack
Categories
About DISH Network
Our adventure began by changing the way people watched TV, bringing DISH to where big cable wouldn’t: rural America. Since then, we have reinvented ourselves and our own industry with Sling TV to give millions of consumers more choice in entertainment.