Principal Product Security Engineer, Cloud Security

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Product Security Engineer, Cloud Security based in India.
As a Principal Product Security Engineer, Cloud Security, you will define and drive the technical vision for cloud security across large-scale, globally distributed SaaS platforms. You will lead strategic security architecture initiatives, establishing secure-by-default standards and scalable protection mechanisms across multi-cloud environments. Working closely with engineering leaders, platform architects, and security teams, you will help identify and mitigate complex security risks while strengthening infrastructure resilience. You will play a key role in embedding automated security controls into development workflows, improving cloud security posture, and ensuring compliance across highly regulated environments. This position combines hands-on technical expertise with strategic leadership, offering the opportunity to influence engineering practices at an enterprise scale. You will also mentor senior engineers and champion a collaborative culture focused on innovation, reliability, and security excellence.

Accountabilities:

Define and drive the overall cloud security architecture across AWS, GCP, and Azure environments, establishing secure-by-default standards, architectural patterns, and scalable security guardrails.

Lead advanced threat modeling exercises and in-depth security assessments across complex systems, distributed microservices, and highly regulated cloud environments.

Design and implement automated security controls, detection mechanisms, and self-healing guardrails integrated into CI/CD pipelines and Infrastructure as Code (IaC).

Establish the technical strategy for Cloud Security Posture Management (CSPM), continuous compliance, security baselines, and risk monitoring.

Develop reusable security frameworks, engineering guidelines, and operational standards to improve security, resilience, and reliability across products and platforms.

Provide technical leadership, mentorship, and guidance to security and software engineers, promoting security awareness and engineering best practices.

Act as a principal technical advisor during high-severity security incidents, supporting root-cause investigations and defining long-term architectural remediation strategies.

Collaborate with executive stakeholders, principal architects, and engineering leaders to translate complex security challenges into actionable strategic priorities.

Lead security initiatives across architectural transformations, including monolith-to-microservices migrations and the evolution of cloud-native platforms.

Champion developer experience while ensuring robust security practices are embedded throughout the software development lifecycle.

Requirements:

10+ years of experience in security engineering, with deep specialization in cloud security, secure architecture, and platform security within enterprise environments or high-growth SaaS organizations.

Proven experience serving as a principal engineer or technical authority, leading large-scale security architecture initiatives, risk mitigation programs, and threat modeling activities.

Strong hands-on expertise in multi-cloud environments, particularly AWS, GCP, and/or Azure, alongside containerization technologies such as Docker, Kubernetes, and service mesh.

Extensive experience designing and reviewing security architectures for highly regulated environments, including private, isolated, government, or FedRAMP-compliant cloud offerings.

Demonstrated experience leading architectural transformations, including securing microservices architectures and large-scale distributed systems.

Proficiency in at least one modern programming language, such as Python, Go, Java, or JavaScript, with experience developing scalable security automation and internal tooling.

Strong knowledge of Infrastructure as Code (IaC), policy-as-code, centralized secrets management, automated security con