Product & Cloud Security Engineer at Bestol

Bengaluru, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

08 Feb, 26

Salary

0.0

Posted On

10 Nov, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Vulnerability Management, Cloud Security, Secure Development Practices, DevSecOps, Compliance Frameworks, Collaboration Skills, Communication Skills

Industry

IT Services and IT Consulting

Description

Company Description BETSOL is a cloud-first digital transformation and data management company offering products and IT services to enterprises in over 40 countries. BETSOL team holds several engineering patents, is recognized with industry awards, and BETSOL maintains a net promoter score that is 2x the industry average. BETSOL’s open source backup and recovery product line, Zmanda (Zmanda.com), delivers up to 50% savings in total cost of ownership (TCO) and best-in-class performance. BETSOL Global IT Services (BETSOL.com) builds and supports end-to-end enterprise solutions, reducing time-to-market for its customers. BETSOL offices are set against the vibrant backdrops of Broomfield, Colorado and Bangalore, India. We take pride in being an employee-centric organization, offering comprehensive health insurance, competitive salaries, 401K, volunteer programs, and scholarship opportunities. Office amenities include a fitness center, cafe, and recreational facilities. Learn more at betsol.com. Job Description About the Role We are looking for a passionate Product & Cloud Security Engineer to join our Information Security team. The ideal candidate will play a key role in strengthening the organization’s product security posture—driving secure design, implementation, and governance across our product and cloud environments. This role combines hands-on security expertise with process-oriented governance, ensuring that our applications and cloud workloads meet both internal security standards and external compliance requirements. Key Responsibilities Partner with product and engineering teams to review designs, identify risks, and recommend secure architecture patterns and mitigations. Contribute to defining, implementing, and continuously improving the Secure SDLC framework—embedding security checkpoints, tools, and metrics throughout development pipelines. Support identification, triage, and remediation of vulnerabilities across applications and cloud environments. Work with engineering teams to ensure timely closure of findings. Help operationalize and optimize SAST, DAST, and SCA tooling to integrate seamlessly within CI/CD pipelines. Assist in implementing and reviewing security controls, IAM configurations, and compliance guardrails for workloads deployed in Azure and GCP. Support ongoing adherence to PCI-DSS, ISO 27001, and other relevant frameworks by mapping controls, maintaining evidence, and supporting audits. Understand key privacy regulations (e.g., GDPR, CCPA) and how they translate into security control requirements for product and infrastructure design. Required Skills & Experience Strong understanding of application and product security principles. Hands-on experience with vulnerability management and application security testing tools (e.g., Wiz, Qualys, SonarQube, Checkmarx, Burp, OWASP ZAP, Black Duck, etc.). Good knowledge of cloud security controls and best practices for Azure and GCP. Familiarity with secure development practices, DevSecOps, and integrating security within CI/CD pipelines. Exposure to compliance frameworks such as PCI-DSS, ISO 27001, and SOC 2. Strong collaboration skills — ability to work with developers, product owners, and compliance teams. Excellent written and verbal communication skills. Preferred / Nice-to-Have Understanding of privacy frameworks and data protection principles. Relevant certifications (e.g., CCSP, AZ-500, GCP Security Engineer, CSSLP, CISSP, CEH) are a plus. Experience with threat modeling or secure design reviews. Qualifications BE/BTECH in Information Technology, Computer Science, or a related field.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The Product & Cloud Security Engineer will strengthen the organization’s product security posture by driving secure design, implementation, and governance across product and cloud environments. This role involves partnering with product and engineering teams to review designs, identify risks, and recommend secure architecture patterns.