Principal Product Security Engineer, Cloud Security

Location: India
Department: Security & IT

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Product Security Engineer, Cloud Security based in India.

As a Principal Product Security Engineer, Cloud Security, you will define and drive the technical vision for cloud security across large-scale, globally distributed SaaS platforms. You will lead strategic security architecture initiatives, establishing secure-by-default standards and scalable protection mechanisms across multi-cloud environments. Working closely with engineering leaders, platform architects, and security teams, you will help identify and mitigate complex security risks while strengthening infrastructure resilience. You will play a key role in embedding automated security controls into development workflows, improving cloud security posture, and ensuring compliance across highly regulated environments. This position combines hands-on technical expertise with strategic leadership, offering the opportunity to influence engineering practices at an enterprise scale. You will also mentor senior engineers and champion a collaborative culture focused on innovation, reliability, and security excellence.

Accountabilities:

• Define and drive the overall cloud security architecture across AWS, GCP, and Azure environments, establishing secure-by-default standards, architectural patterns, and scalable security guardrails.

• Lead advanced threat modeling exercises and in-depth security assessments across complex systems, distributed microservices, and highly regulated cloud environments.

• Design and implement automated security controls, detection mechanisms, and self-healing guardrails integrated into CI/CD pipelines and Infrastructure as Code (IaC).

• Establish the technical strategy for Cloud Security Posture Management (CSPM), continuous compliance, security baselines, and risk monitoring.

• Develop reusable security frameworks, engineering guidelines, and operational standards to improve security, resilience, and reliability across products and platforms.

• Provide technical leadership, mentorship, and guidance to security and software engineers, promoting security awareness and engineering best practices.

• Act as a principal technical advisor during high-severity security incidents, supporting root-cause investigations and defining long-term architectural remediation strategies.

• Collaborate with executive stakeholders, principal architects, and engineering leaders to translate complex security challenges into actionable strategic priorities.

• Lead security initiatives across architectural transformations, including monolith-to-microservices migrations and the evolution of cloud-native platforms.

• Champion developer experience while ensuring robust security practices are embedded throughout the software development lifecycle.

Requirements:

• 10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high-growth SaaS organizations.

• Proven experience serving as a principal engineer or technical authority, leading large-scale security architecture initiatives, risk mitigation programs, and threat modeling activities.

• Strong hands-on expertise in multi-cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.

• Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP-compliant cloud offerings.

• Demonstrated experience leading architectural transformations, including securing microservices architectures and large-scale distributed systems.

• Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and internal tooling.

• Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security controls, and CI/CD security integrations.

• Deep understanding of cloud security architecture, Zero Trust principles, tenant data isolation, encryption, cryptographic systems, and multi-tenant SaaS environments.

• Experience with cloud detection engineering, distributed telemetry and logging, IAM graph analysis, least-privilege automation, and enterprise alert optimization.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related technical discipline, or equivalent practical experience.

• Exceptional technical leadership, communication, and stakeholder management skills, with the ability to influence executive leadership and cross-functional engineering teams.

• Proven ability to mentor senior engineers, encourage collaboration, and promote an inclusive engineering culture.

• Strong ownership mindset, proactive problem-solving abilities, and a passion for improving security through automation and continuous innovation.

Additional advantages:

• Experience developing internal software platforms or developer tools that automate security and compliance workflows.

• Contributions to open-source security projects, discovery and disclosure of CVEs, or active involvement in security frameworks.

• Experience presenting at recognized cybersecurity conferences or publishing security research.

• Advanced expertise in securing serverless architectures, service meshes, and large-scale Kubernetes environments.

• Experience designing security controls for regulated cloud environments, including sovereign, isolated, and FedRAMP offerings.

Benefits:

• Flexible working arrangements, with the freedom to work remotely or from an office where available.

• Distributed-first working environment with virtual interviews and onboarding.

• Health and wellbeing resources to support employees and their families.

• Paid volunteer days and opportunities to contribute to local communities.

• Access to a collaborative and inclusive international working environment.

• Opportunities to influence large-scale security initiatives and work with advanced cloud technologies.

• Professional development through collaboration with experienced engineering and security leaders.

• A culture that values autonomy, innovation, continuous learning, and individual contributions.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

 Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1