Cloud security engineer at CRED in Bengaluru: hands-on AWS security, Kubernetes and cloud posture management for one of India's most-used fintechs - at a friendly 2-6 years bar.

This Bengaluru role asks for 2-6 years in cloud security: deep AWS security expertise (IAM, KMS, Secrets Manager, CloudTrail), container and Kubernetes security, CSPM tooling (Wiz, CrowdStrike or similar), and compliance frameworks (ISO 27001, SOC 2, PCI DSS). Per the listing, you own cloud security posture end to end: misconfiguration detection, remediation and automated enforcement.

About CRED

CRED is the Bengaluru-based members-only fintech for India's most creditworthy individuals: credit card bill payments plus rewards, lending, travel and commerce, known for its design-led products and distinctive marketing. Per its listings, it hires across engineering, security, data and product. Learn more on CRED's website.

The role in plain terms

You own CRED's cloud security posture: detecting and remediating misconfigurations, hardening IAM, securing containers and Kubernetes workloads, and building automated guardrails and enforcement. The listing names AWS security services, Kubernetes and container security, CSPM platforms such as Wiz and CrowdStrike, and compliance frameworks including ISO 27001, SOC 2 and PCI DSS.

What the employer asks for

These requirements are quoted from the employer's listing, kept in their exact words so eligibility details are not distorted:

Who this role suits

Security engineers with 2-6 years and real AWS depth - the 2-6 band makes this one of the more accessible cloud-security seats at a top-tier consumer fintech. Strong fit for cloud engineers moving into security with AWS certification or hands-on IAM hardening. Not for purely compliance-focused profiles.

Practical notes

Prepare AWS security specifics: IAM policy pitfalls, KMS key management, CloudTrail detection patterns. Kubernetes security experience and CSPM tooling (Wiz, CrowdStrike) are named, so flag any exposure. CRED is Bengaluru-based; the listing is on-site.

How to apply

Apply directly on the employer's site: Cloud Security Engineer at CRED. We found this listing on the Lever public postings feed (jobs.lever.co), where it was posted on 29 Jan 2026 and was still open when we checked on 31 Oct 2026. Before applying, re-read the employer's own description in full, since eligibility details, deadlines and process steps can change at any time and the employer's page is always the final word. Tailor your resume to the specific requirements above rather than sending a generic one: mirror the skills and tools the listing names where you genuinely have them. A short, specific note on why this team and this problem interest you goes further than a long generic cover letter. Never pay a fee to apply or interview; genuine employers, including this one, do not charge candidates.

Related openings on GetFirstJob

If this role is not the right fit, these current openings are in a similar area:

We write and maintain this page from the employer's public listing and link straight to their application page. We do not act as a recruiter, and applying is always free. If the link above stops working, the role has likely been filled.

This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.