SecOps / Platform Security Engineer (AWS, Security & Compliance)

Role Budget: 15 -25 LPA (Based on experience)

Role Overview:

We are looking for a SecOps / Platform Security Engineer to lead the security architecture and compliance initiatives of our AWS-based infrastructure.

This role focuses on cloud security, compliance implementation, and secure platform architecture, ensuring our infrastructure meets enterprise-grade security standards. The ideal candidate will work closely with the engineering team to implement strong security controls, manage access policies, and build a compliant and resilient production environment.

This is a high-ownership role suited for engineers who specialize in cloud security, SecOps practices, and compliance-driven infrastructure.

Key Responsibilities

Security & Compliance (Primary Responsibility)

• Lead the implementation of security frameworks such as PCI DSS, SOC2, or ISO 27001
• Design and enforce secure cloud architecture and network isolation
• Implement and maintain encryption standards across infrastructure and services
• Define and manage IAM policies, access controls, and least-privilege security models
• Conduct security audits, vulnerability assessments, and remediation planning

Cloud Security Operations

• Monitor infrastructure for security threats, anomalies, and vulnerabilities
• Implement security monitoring, logging, and incident response workflows
• Strengthen application and infrastructure security across the AWS ecosystem

Infrastructure as Code & Platform Security

• Manage AWS infrastructure using Infrastructure as Code (SST, CDK, Pulumi, Terraform)
• Ensure infrastructure deployments follow secure-by-design principles
• Integrate security practices into CI/CD pipelines

Platform Stability & Reliability

• Support scalable backend infrastructure handling high-volume financial transactions
• Improve system resilience, availability, and security posture

Security Leadership

• Act as the Security Champion for the engineering team
• Guide developers on secure coding practices and cloud security best practices

Requirements

• 5+ years of experience in SecOps, Cloud Security, or Security-focused DevOps roles
• Strong experience with AWS security architecture and services
• Hands-on experience implementing security compliance frameworks (PCI DSS / SOC2 / ISO 27001)
• Experience designing secure IAM policies, network isolation, and encryption standards
• Strong experience with Infrastructure as Code (SST, CDK, Terraform, Pulumi)
• Experience securing production systems handling financial or high-traffic workloads
• Strong written and verbal communication skills for remote collaboration

Tech Environment:

Cloud: AWS

Languages: TypeScript, Node.js

Infrastructure: SST / AWS CDK / Terraform / Pulumi

Databases: PostgreSQL, DynamoDB, MongoDB

Frameworks: NestJS, Next.js