Skip to content

Open nowPosted 150 days ago

SecOps & Governance Engineer

Cambridge Technology15 open roles

Where
Hyderabad, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecOps & Governance EngineerCambridge Technology · Hyderabad, India
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Cambridge Technology's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 150 days ago

The posting

We are looking for a driven and detail-oriented SecOps & Governance Engineer to secure our cloud infrastructure and operationalise AI governance frameworks. This role sits at the intersection of security operations and emerging AI compliance—an exciting frontier as organisations adopt AI at scale.

You will be responsible for securing cloud environments, operationalising governance controls, and working hands-on with AI risk management platforms such as Credo AI and VerifyWise. You will collaborate with engineering, data science, legal, and compliance teams to ensure our infrastructure and AI systems meet regulatory and enterprise governance standards.

Roles and Responsibilities

Cloud Infrastructure Security

  • Design, implement, and maintain security controls across cloud environments (AWS / Azure / GCP)
  • Enforce IAM policies, RBAC, least-privilege access, and secrets management across multi-cloud setups
  • Conduct regular vulnerability assessments, penetration testing coordination, and security audits
  • Monitor and respond to security events via SIEM/SOAR platforms; manage incident response workflows
  • Ensure network security posture: VPC configurations, firewalls, WAFs, DDoS protection, and TLS management

Governance, Risk & Compliance (GRC)

  • Own and operationalise cloud governance policies aligned with ISO 27001, SOC 2, and CIS Benchmarks
  • Manage policy-as-code initiatives using tools like Open Policy Agent (OPA) or HashiCorp Sentinel
  • Maintain compliance dashboards and evidence artefacts for internal and external audits
  • Conduct risk assessments for infrastructure changes and new technology deployments
  • ISO 42001 (AI Management Systems): Lead or support implementation of AI governance frameworks aligned with this standard (added advantage)

AI Governance & Risk Management Platforms

  • Work with Credo AI to define, track, and report on AI model risk policies, model cards, and compliance requirements
  • Utilise VerifyWise or similar platforms to assess, document, and manage AI system risks end-to-end
  • Collaborate with ML/data science teams to integrate governance checkpoints into the AI/ML model lifecycle
  • Monitor AI systems for bias, explainability gaps, data drift, and regulatory non-compliance
  • Develop internal AI governance playbooks, controls libraries, and risk registers

DevSecOps & Automation ( Optional)

  • Embed security into CI/CD pipelines (SAST, DAST, container scanning, IaC security scanning)
  • Manage infrastructure-as-code (Terraform, Pulumi, CloudFormation) with security best practices
  • Automate compliance checks and remediation using scripting (Python, Bash) and cloud-native tools
  • Implement and manage CSPM (Cloud Security Posture Management) tools

Cross-Functional Collaboration

  • Partner with Legal, Privacy, and Risk teams on data governance, data residency, and regulatory obligations
  • Provide security and governance guidance to product and engineering squads
  • Prepare executive-level reports on security posture, AI governance metrics, and compliance status

Key Skill

Public Cloud Skills (Required)

  • 3+ years of hands-on experience operating and securing workloads on one or more public cloud platforms: AWS, Google Cloud Platform (GCP), or Microsoft Azure
  • AWS: Deep familiarity with core services — EC2, S3, RDS, Lambda, VPC, IAM, CloudTrail, GuardDuty, Security Hub, AWS Config, and KMS
  • GCP: Experience with Compute Engine, GKE, Cloud IAM, Cloud Armor, Security Command Center, VPC Service Controls, and Assured Workloads
  • Azure: Knowledge of Azure AD, Defender for Cloud, Policy, Sentinel, Key Vault, and Azure Monitor (advantageous)
  • Multi-cloud networking: cross-cloud connectivity, transit gateways, shared VPCs, private endpoints, and DNS architecture
  • Strong understanding of cloud-native security primitives: SCPs, organisation policies, resource hierarchy, and cloud landing zone design
  • Cloud cost governance: tagging strategies, budget alerts, and rightsizing as they interact with compliance and security guardrails

Technical Skills

  • Proficiency with AI governance platforms: Credo AI, VerifyWise, or comparable tools
  • Experience with IAM, SIEM, CSPM, and vulnerability management tools
  • Hands-on experience with one or more enterprise security platforms: Microsoft Defender for Cloud, CrowdStrike Falcon, or Palo Alto Prisma Cloud — covering threat detection, endpoint protection, and cloud security posture management
  • Infrastructure-as-Code (Terraform, Pulumi, or CloudFormation) for cloud resource provisioning and security automation
  • Scripting proficiency: Python and/or Bash for automation and compliance tooling
  • Working knowledge of container security: Kubernetes (EKS / GKE / AKS), Docker, and image scanning tools (Trivy, Snyk)
  • Understanding of DevSecOps principles and CI/CD security integration.

Experience:

5 - 10 years

Education Qualification:

B.E/B. Tech/MCA

Work Location

Hyderabad

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Cambridge Technology's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Cambridge Technology's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Cambridge Technology's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.