Lead the security posture across cloud and on-prem environments with emphasis on GCP. Design enterprise security architecture, enforce compliance (ISO 27001, SOC 2, GDPR), build policy-as-code and automated guardrails, harden infrastructure and Kubernetes, implement drift detection and self-healing, and lead monitoring, detection, and incident response including runbooks and root-cause investigations.
As our Lead Security Engineer, you'll own and elevate Arcana's overall security posture - cloud, on-prem, and everything in between. You'll design and enforce policies, automate controls, and harden infrastructure end-to-end. While your primary focus will be on our GCP resources, you'll also partner with teams across networking, applications, and compliance to ensure we're secure by design and resistant to drift.
Responsibilities:
- Enterprise Security Architecture - Governance and Compliance, including driving adherence to ISO 27001, SOC 2, GDPR, and enforcing CIS benchmarks on all infrastructure.
- Policy, Automation, and Guardrails - own the end-to-end security lifecycle by defining policy-as-code, embedding continuous compliance checks into CI/CD, and building automated, drift-resistant guardrails across cloud, containers, and VMs.
- Infrastructure Hardening and Drift Detection - implement automated drift alerts and self-healing playbooks for VPCs, firewall rules, Kubernetes clusters, and endpoints.
- Monitoring, Logging, and Incident Response - configure Cloud Audit Logs, SIEM exports, and custom alerts for critical security events; lead root-cause investigations, build detection logic, and develop runbooks for cloud-wide incidents.
Requirements:
- 5+ years driving security and compliance in dynamic, regulated environments- securing cloud-native platforms and hybrid infrastructures, with deep familiarity in fintech and portfolio-management standards, and best practices for supporting distributed, remote teams.
- Deep expertise with GCP security (IAM, KMS, VPC Service Controls, Cloud Logging/Audit, WAF, SecOps) and Kubernetes application hardening.
- Strong Infrastructure-as-Code skills (Terraform or equivalent) and GitOps experience (ArgoCD, Flux).
- Proficiency in Python scripting and policy-as-code frameworks (OPA, Gatekeeper).
- Excellent communicator - able to translate technical findings into clear policies and remediation plans.
Helpful Experience:
- Familiarity with multi-cloud security controls.
- Security certifications (GCP Professional Security Engineer, CISSP, CKA/CKS).
- Experience with service mesh (Istio/Anthos) or zero-trust architectures.
Similar Jobs
Information Technology
Lead L3 Network Security Engineer responsible for designing, implementing, and managing Palo Alto and Fortinet firewall environments, Fortinet SD-WAN, Panorama, and Azure network security. Lead data center migrations, routing and switching (BGP/OSPF/VRF/ECMP), incident response, and security operations. Create HLD/LLD, runbooks, and mentor L1/L2 engineers while driving upgrades, policy migrations, and compliance.
Top Skills:
AdvpnAzure FirewallAzure MonitorAzure Virtual WanBgpDhcpDnsDns SecurityEcmpExpressrouteFortianalyzerFortigateFortimanagerFortinet Sd-WanIdsIpsIpsec VpnAzureNatNvaOspfPalo AltoPanoramaQosSiem IntegrationSsl InspectionSsl VpnStatic RoutingSyslogThreat PreventionUrl FilteringVdomVlanVpn GatewayVrf
AdTech • Cloud • Marketing Tech
Lead cloud security for a cloud-native, multi-cloud environment. Own CSPM, vulnerability management, container and Kubernetes security, IaC/PaaC, CI/CD hardening, risk assessments, remediation standards, and cross-team security enablement, while defining metrics and delivering training.
Top Skills:
Admission ControllerAksAWSAzureCi/CdCis BenchmarksContainer SecurityCspmDockerEksGCPGkeIac (Infrastructure As Code)IpsecKubernetesNetwork PolicyOauthOpenidPaac (Policy As Code)Podsecuritypolicy (Psp)Tcp/IpTerraformTlsUdpVulnerability Management
Hardware • Other • Software • Appliances • Industrial • Manufacturing
Senior individual contributor driving product security, secure development, and DevOps for regulated medical software. Responsibilities include threat modeling, security testing and remediation, secure coding guidance, hands-on development in Java/C/C++/Python, CI/CD and automation, compliance documentation, and cross-functional collaboration to improve secure SDLC and release readiness.
Top Skills:
APIsAutomated TestingBuild And Release AutomationCC++Ci/CdDatabasesDynamic AnalysisGitJavaPythonSoftware Composition AnalysisStatic Analysis
What you need to know about the Bengaluru Tech Scene
Dubbed the "Silicon Valley of India," Bengaluru has emerged as the nation's leading hub for information technology and a go-to destination for startups. Home to tech giants like ISRO, Infosys, Wipro and HAL, the city attracts and cultivates a rich pool of tech talent, supported by numerous educational and research institutions including the Indian Institute of Science, Bangalore Institute of Technology, and the International Institute of Information Technology.
