Senior Cloud Security Engineer
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 1d ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 1d ago
The date the source published, not the day we noticed it (2026-10-09). Last seen at its source 1h ago.
We have tracked this listing since 9 Oct 2026 (1 days). The employer's own board has carried it every time we have read it, most recently 1 hour ago.
Is it remote?
Marked remote on the employer's board
Their board carries a remote setting on this posting — a field they filled in, not wording we read. The location field names somewhere specific, which is usually where the team or the entity sits.
Who may apply?
India
The description states no restriction of its own. This is the source's own tag.
Pay not stated
Similar roles pay $50k–82.5k/yr
Middle 50% of 12 listings that do state pay — Engineering · all levels · India · USD/year. This employer has published no salary; this is what comparable listings we hold disclose, never converted between currencies or periods. How this is calculated.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Workable employer's own board first seen 1d ago · last seen 1h ago
The listing
About the Company
At Delta, we are re-imagining and re-building the financial system. Join our team to make a positive impact on the future of finance.
🎯 Mission Driven: Re-imagine and re-build the future of finance.
💡 Most innovative cryptocurrency derivatives exchange. With a daily traded volume of ~$0.5billion, and increasing. Delta is bigger than all the Indian crypto exchanges combined.
📈 Offer the widest range of derivative products and have been serving traders all over the globe since 2018 and growing fast.
💪🏻 The founding team is comprised of IIT and ISB graduates. Business co-founders have previously worked with Citibank, UBS and GIC; and our tech co-founder is a serial entrepreneur who previously co-founded TinyOwl and Housing.com.
💰 Funded by top crypto funds (Sino Global Capital, CoinFund, Gumi Cryptos) and crypto projects (Aave and Kyber Network).
About the role
You'll be the dedicated security engineer at a derivative exchange (~250 people, 50-100 person dev team). All infra is AWS. DevOps builds it; you make sure it's secure and can prove it. You'll be hands-on — reviewing Terraform PRs for security gaps, building automated drift detection, writing SIEM rules, and owning the credential lifecycle. When the CTO asks, "Are we secure?" you pull up a dashboard, not a slide deck. You own the security posture of the infrastructure from shaping how access and controls are modelled, to verifying they hold in practice.
What you'll do
- Verify that infra implementations match the security model — continuously, not quarterly.
- Build automated compliance checks and drift detection (AWS Config, Steampipe, custom tooling, whatever works)
- Review Terraform PRs for IAM, SCP, and network security gaps before they hit production.
- Own credential lifecycle: rotation, PAM, JIT access, session recording.
- Write and tune detection rules in OpenSearch SIEM.
- Build evidence dashboards that prove security posture to non-security leadership 7. Evaluate security tooling (build vs buy) and own the recommendation with documented tradeoffs.
Must-haves
- 5+ years in infrastructure or security engineering, with at least 2 years focused on AWS security
- IAM beyond basic roles — you understand policy evaluation logic, permission boundaries, cross-account access patterns
- Have built automated security checks that run in production (any tooling)
- Can read and critically review Terraform for security posture
- Have operated PAM tooling or credential rotation in production (any tool)
- Comfortable owning a security domain end-to-end without constant direction
Strong advantages
- Worked at an org < 500 people where you were one of the very few (or the only) security engineers
- Multi-account AWS Organizations / SCP experience. Wrote SIEM detection rules in production (any platform — OpenSearch, Splunk, Elastic, etc.)
- Regulated fintech, exchange, or payments background.
- Built security evidence/reporting that non-security people actually used.