Senior Engineer - Cloud Security

DISH Network Technologies India Pvt. Ltd is a technology subsidiary of EchoStar. Our organization is at the forefront of technology, serving as a disruptive force and driving innovation and value on behalf of our customers.

Our product portfolio includes Boost Mobile (consumer wireless), DISH TV (direct broadcast satellite), Sling TV (over-the-top service provider), Hughes (global satellite connectivity solutions) and Hughesnet (satellite internet).

Our facilities in India are some of EchoStar's largest development centers outside the U.S. As a hub for technological convergence, our engineering talent is a catalyst for innovation in multimedia network and communications development.

EchoStar does not charge any fees to job applicants or candidates at any point during the recruitment and hiring process. We strongly advise all individuals to be vigilant and disregard any unsolicited requests for payment or personal financial information related to an EchoStar employment opportunity.

Our Technology teams challenge the status quo and reimagine capabilities across industries. Whether through research and development, technology innovation or solution engineering, our people play vital roles in connecting consumers with the products and platforms of tomorrow.

We are seeking a highly skilled AWS Senior Security Engineer to join our cloud security team. In this role, you will design, deploy, and maintain robust security controls across our Amazon Web Services (AWS) infrastructure. You will focus on Cloud Security Posture Management (CSPM), identity and access management, AI-driven automation and security implementation, and broad-spectrum architectural security across all core AWS services—ensuring our cloud workloads remain resilient against emerging threats while enabling rapid business growth.

• →Implement and manage CSPM tools (e.g., Cortex XSIAM, AWS Security Hub, etc) to maintain real-time visibility into misconfigurations, compliance posture, and risk posture across multi-account environments.
• →Establish baseline security practices across the breadth of AWS services (Compute, Storage, Database, Serverless, Networking, Messaging, and Governance) to guarantee defense-in-depth across the entire AWS ecosystem.
• →Evaluate, integrate, and operationalize AI/ML capabilities (e.g., AWS Bedrock, Amazon Q, SageMaker, LLM security practices) to automate security workflows, incident response playbooks, and threat intelligence while securing AI pipelines and workloads.
• →Architect, enforce, and audit fine-grained IAM policies, Service Control Policies (SCPs), role hierarchies, and temporary credentials adhering strictly to the principle of least privilege and CIEM principles.
• →Configure and manage encryption at rest and in transit using AWS KMS, Secrets Manager, and Certificate Manager. Maintain secure VPC network architectures, security groups, Network ACLs, and AWS WAF configurations.
• →Monitor security logs via CloudTrail, GuardDuty, Security Hub, and AWS Config. Build automated incident response playbooks using EventBridge, Lambda, and SOAR tools to contain security incidents instantly.
• →Integrate security scanning tools (SAST/DAST, dependency scanning, secret detection) directly into CI/CD deployment pipelines. Write and maintain Infrastructure-as-Code (IaC) using Terraform or AWS CloudFormation.
• →Ensure multi-account cloud operations meet industry security standards (e.g., SOC 2, ISO 27001, HIPAA, PCI-DSS) using AWS Control Tower and AWS Config rules.

• Strong hands-on experience with enterprise CSPM platforms (Prisma Cloud, Wiz, AWS Security Hub, AWS Config) for continuous risk assessment, misconfiguration detection, and compliance tracking.
• In-depth architectural security understanding of core and advanced AWS services, including EC2, S3, RDS, DynamoDB, Lambda, ECS/EKS, VPC, Transit Gateway, Route 53, SNS/SQS, KMS, and IAM.
• Solid understanding of AI/ML fundamentals and practical experience applying generative AI/LLM models or AWS AI services (Bedrock, SageMaker, Amazon Q) to automate security analysis, triage, and security operations.
• Deep mastery of AWS IAM, AWS Organizations, AWS Control Tower, SCPs, and Cloud Infrastructure Entitlement Management (CIEM) principles.
• Strong knowledge of VPC design, Subnets, Transit Gateway, Security Groups, Network ACLs, AWS WAF, and Shield.
• Proficiency with Terraform, CloudFormation, Python, or Boto3 for automating security controls and remediation workflows.

• Must have 5+ years of dedicated experience in cloud security or cybersecurity engineering, with at least 3+ years explicitly focused on AWS, GCP environments.
• Proven ability to communicate security risks effectively and partner with developer teams to resolve issues without creating operational friction.
• Demonstrated track record of conducting post-incident root-cause analysis and driving continuous improvement.

• AWS Certified Security - Specialty
• AWS Certified Solutions Architect – Associate or Professional
• ISC2 Certified Cloud Security Professional (CCSP)
• GIAC Cloud Security Automation (GCSA) / CISSP