SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Skylo is building satellite-to-device (NTN) connectivity infrastructure that connects smartphones and IoT devices directly to satellites without special hardware. The company operates a live direct-to-device service across five continents covering over 72 million square kilometers, partnering with leading satellite operators, mobile network operators, and chipset makers.
As a Senior Cloud Security Engineer, you will be a foundational hire on the Platform Security pillar, owning the security posture of Skylo's cloud infrastructure across AWS and GCP environments. You'll build controls, tooling, and processes largely from the ground up in a multi-cloud, multi-jurisdictional environment spanning India, US, and EU. This role offers direct influence over architecture and tooling decisions rather than inheriting legacy systems.
Key responsibilities include:
- Design, implement, and maintain cloud security architecture across AWS/GCP (IAM, network segmentation, workload security, secrets management, encryption/KMS)
- Build and tune cloud security posture management (CSPM), workload protection, and cloud-native detection capabilities
- Partner with platform/DevOps engineering to embed security into CI/CD pipelines and infrastructure-as-code (Terraform, CloudFormation)
- Own vulnerability management and hardening for cloud workloads, containers, and Kubernetes environments
- Support incident response and forensics for cloud-based security events
- Conduct security assessments, vulnerability assessments, and security reviews
- Monitor and analyze security events across SIEM, EDR/XDR, firewalls, and vulnerability management platforms
- Work cross-functionally with Engineering, DevOps, Cloud & Infrastructure, and Product teams to drive security remediation
- Support threat modeling activities and cybersecurity initiatives from identification through implementation
- Administer vulnerability-management tools and integrations across application, cloud, infrastructure, and network environments
The role is based in Bangalore with a hybrid arrangement of 3 days per week in office.
REQUIREMENTS:
- 6+ years in security engineering, with 3+ years focused specifically on cloud security (AWS and/or GCP)
- Deep hands-on experience with IAM design, VPC/network security, container and Kubernetes security, and secrets/key management
- Working knowledge of infrastructure-as-code security (Terraform, policy-as-code tools like OPA/Sentinel)
- Experience with CSPM/CNAPP tools (e.g., Wiz, Prisma Cloud, Orca, native cloud tooling)
- Scripting/automation ability (Python, Go, Java, or similar) for security tooling and remediation
- Strong communication skills for cross-functional collaboration in a small, fast-moving team
- Working knowledge of vulnerabilities affecting cloud infrastructure, operating systems, networks, web applications, and enterprise technologies
- Familiarity with GCP/AWS environments and cloud vulnerability findings affecting EC2/VMs, containers, Kubernetes (GKE/EKS), networking, identity, and managed services
- Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection
- Familiarity with security frameworks such as NIST, ISO 27001, or CIS
- Exposure to DevSecOps, CI/CD security, SOAR, CSPM, threat hunting, or security automation
- Knowledge of Python, Bash, or PowerShell
- Bonus: experience in telco, satellite, or other regulated critical-infrastructure environments; relevant certifications (AWS/GCP security specialty, CCSP)
