Principal Product Security Engineer, Cloud Security

This

position

is

listed

on

behalf

of

a

partner

company,

who

manages

all

applications

and

next

steps.

Our

partner

is

looking

for

a

Principal

Product

Security

Engineer,

Cloud

Security

based

in

India

.

As

a

Principal

Product

Security

Engineer,

Cloud

Security,

you

will

define

and

drive

the

technical

vision

for

cloud

security

across

large-scale,

globally

distributed

SaaS

platforms.

You

will

lead

strategic

security

architecture

initiatives,

establishing

secure-by-default

standards

and

scalable

protection

mechanisms

across

multi-cloud

environments.

Working

closely

with

engineering

leaders,

platform

architects,

and

security

teams,

you

will

help

identify

and

mitigate

complex

security

risks

while

strengthening

infrastructure

resilience.

You

will

play

a

key

role

in

embedding

automated

security

controls

into

development

workflows,

improving

cloud

security

posture,

and

ensuring

compliance

across

highly

regulated

environments.

This

position

combines

hands-on

technical

expertise

with

strategic

leadership,

offering

the

opportunity

to

influence

engineering

practices

at

an

enterprise

scale.

You

will

also

mentor

senior

engineers

and

champion

a

collaborative

culture

focused

on

innovation,

reliability,

and

security

excellence.

Accountabilities:

Define

and

drive

the

overall

cloud

security

architecture

across

AWS,

GCP,

and

Azure

environments,

establishing

secure-by-default

standards,

architectural

patterns,

and

scalable

security

guardrails.

Lead

advanced

threat

modeling

exercises

and

in-depth

security

assessments

across

complex

systems,

distributed

microservices,

and

highly

regulated

cloud

environments.

Design

and

implement

automated

security

controls,

detection

mechanisms,

and

self-healing

guardrails

integrated

into

CI/CD

pipelines

and

Infrastructure

as

Code

(IaC).

Establish

the

technical

strategy

for

Cloud

Security

Posture

Management

(CSPM),

continuous

compliance,

security

baselines,

and

risk

monitoring.

Develop

reusable

security

frameworks,

engineering

guidelines,

and

operational

standards

to

improve

security,

resilience,

and

reliability

across

products

and

platforms.

Provide

technical

leadership,

mentorship,

and

guidance

to

security

and

software

engineers,

promoting

security

awareness

and

engineering

best

practices.

Act

as

a

principal

technical

advisor

during

high-severity

security

incidents,

supporting

root-cause

investigations

and

defining

long-term

architectural

remediation

strategies.

Collaborate

with

executive

stakeholders,

principal

architects,

and

engineering

leaders

to

translate

complex

security

challenges

into

actionable

strategic

priorities.

Lead

security

initiatives

across

architectural

transformations,

including

monolith-to-microservices

migrations

and

the

evolution

of

cloud-native

platforms.

Champion

developer

experience

while

ensuring

robust

security

practices

are

embedded

throughout

the

software

development

lifecycle.

Requirements:

10+

years

of

experience

in

security

engineering,

with

deep

specialization

in

cloud

security,

secure

architecture,

and

platform

security

within

enterprise

environments

or

high-growth

SaaS

organizations.

Proven

experience

serving

as

a

principal

engineer

or

technical

authority,

leading

large-scale

security

architecture

initiatives,

risk

mitigation

programs,

and

threat

modeling

activities.

Strong

hands-on

expertise

in

multi-cloud

environments,

particularly

AWS,

GCP,

and/or

Azure,

alongside

containerization

technologies

such

as

Docker,

Kubernetes,

and

service

mesh.

Extensive

experience

designing

and

reviewing

security

architectures

for

highly

regulated

environments,

including

private,

isolated,

government,

or

FedRAMP-compliant

cloud

offerings.

Demonstrated

experience

leading

architectural

transformations,

including

securing

microservices

architectures

and

large-scale

distributed

systems.

Proficiency

in

at

least

one

modern

programming

language,

such

as

Python,

Go,

Java,

or

JavaScript,

with

experience

developing

scalable

security

automation

and

internal

tooling.

Strong

knowledge

of

Infrastructure

as

Code

(IaC),

policy-as-code,

centralized

secrets

management,

automated

security

con

How Jobgether works

• We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
• We appreciate your interest and wish you the best!
• Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1