Description
CRED is an exclusive community for India's most trustworthy and CREDitworthy individuals, where members are rewarded for good financial behavior. CRED was born out of a need to bring back the focus on a long-lost virtue, one of trust.
As a cloud security engineer at CRED, you will work across a diverse information security domain, with a strong focus on cloud, infrastructure, and data security. Your responsibilities will include:
- Identifying security issues (internal and external), working with stakeholders on mitigation, and designing/implementing solutions for complex security problems in AWS-based systems
- Owning and continuously improving the Cloud Security Posture Management (CSPM) program aligned with standards like NIST 800-53 and ISO 27001
- Owning the Cloud Workload Protection Program, including alert investigation and triage
- Driving the Data Security Charter, including data classification, masking, and securing large-scale data stores
- Automating infrastructure security and building security tooling to reduce manual effort
- Conducting security design, infrastructure, and architecture reviews
- Building, operating, and maintaining cloud security platforms to enhance prevention, detection, and response
- Translating product requirements into threat models and identifying security risks
- Building in-house security frameworks to strengthen security culture across tech teams
- Enabling compliance across teams (PCI DSS, ISO 27001, DPDPA) and promoting best practices
- Driving security awareness and engineering maturity across the organisation
To be successful in this role, you should have:
- 2-6 years of experience in information security with solid fundamentals on computer networks, operating systems (Linux), containers, and secure cloud architecture
- Strong programming skills in Python, Go, or Bash
- Solid understanding of cloud security with hands-on experience in AWS/GCP/Azure
- Experience building and automating custom security tools
- Understanding of microservices, CI/CD pipelines, containers, and securing containerized workloads
- Strong grasp of core security principles like least privilege, defense-in-depth, and zero trust
- A data-driven mindset with the ability to influence stakeholders
- Security projects on GitHub or technical blogs
- Strong communication skills and the ability to be a go-to security partner for engineers and product teams
- A proactive approach to staying updated on security threats, breaches, tools, and research
- Basic understanding of LLMs, MCP, and AI agents and interest in building AI-driven security workflows
- Familiarity with vulnerability management, patching cycles, and CVSS
Life at CRED: Working at CRED would instantly make you realize one thing: you are working with the best talent around you, not just in the role you occupy but everywhere you go. At CRED, people always have talent up their sleeves. With the right company, even conversations can be rejuvenating. At CRED, we guarantee a good company.
Hard truths: pushing oneself comes with the role, and we realize pushing oneself is hard work. Which is why CRED is in the continuous process of building an environment that helps the team rejuvenate, including but not limited to a stacked, in-house pantry, with lunch and dinner provided for all the team members, paid sick leaves, and comprehensive health insurance. To make things smoother and to make sure you spend time and energy only on the most important things, CRED strives to make every process transparent: there are no work timings because we do not believe in archaic methods of calculating productivity; your work should speak for you. There are no job designations because you will be expected to hold down roles that cannot be described in one word. Since trust is a major virtue in the community we have built, we make it a point to highlight it in the community behind CRED: all our employees get their salaries before their joining date. A show of trust that speaks volumes because of the skin in the game.