Principal Product Security Engineer, Cloud Security
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
How well do you match this job?
Key details
- Location
- India
- Work style
- Remote
- Level
- Lead / Staff+
- Job type
- Full-time
- Experience
- 10–13 yrs
- Function
- Software engineering
- Focus area
- Security
- Posted
- 18h ago
Skills
About the role
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Product Security Engineer, Cloud Security based in India.
As a Principal Product Security Engineer, Cloud Security, you will define and drive the technical vision for cloud security across large-scale, globally distributed SaaS platforms. You will lead strategic security architecture initiatives, establishing secure-by-default standards and scalable protection mechanisms across multi-cloud environments. Working closely with engineering leaders, platform architects, and security teams, you will help identify and mitigate complex security risks while strengthening infrastructure resilience. You will play a key role in embedding automated security controls into development workflows, improving cloud security posture, and ensuring compliance across highly regulated environments. This position combines hands-on technical expertise with strategic leadership, offering the opportunity to influence engineering practices at an enterprise scale. You will also mentor senior engineers and champion a collaborative culture focused on innovation, reliability, and security excellence.
Accountabilities:
-
Define and drive the overall cloud security architecture across AWS, GCP, and Azure environments, establishing secure-by-default standards, architectural patterns, and scalable security guardrails.
-
Lead advanced threat modeling exercises and in-depth security assessments across complex systems, distributed microservices, and highly regulated cloud environments.
-
Design and implement automated security controls, detection mechanisms, and self-healing guardrails integrated into CI/CD pipelines and Infrastructure as Code (IaC).
-
Establish the technical strategy for Cloud Security Posture Management (CSPM), continuous compliance, security baselines, and risk monitoring.
-
Develop reusable security frameworks, engineering guidelines, and operational standards to improve security, resilience, and reliability across products and platforms.
-
Provide technical leadership, mentorship, and guidance to security and software engineers, promoting security awareness and engineering best practices.
-
Act as a principal technical advisor during high-severity security incidents, supporting root-cause investigations and defining long-term architectural remediation strategies.
-
Collaborate with executive stakeholders, principal architects, and engineering leaders to translate complex security challenges into actionable strategic priorities.
-
Lead security initiatives across architectural transformations, including monolith-to-microservices migrations and the evolution of cloud-native platforms.
-
Champion developer experience while ensuring robust security practices are embedded throughout the software development lifecycle.
-
10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high-growth SaaS organizations.
-
Proven experience serving as a principal engineer or technical authority, leading large-scale security architecture initiatives, risk mitigation programs, and threat modeling activities.
-
Strong hands-on expertise in multi-cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.
-
Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP-compliant cloud offerings.
-
Demonstrated experience leading architectural transformations, including securing microservices architectures and large-scale distributed systems.
-
Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and internal tooling.
-
Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security co