Job Purpose Information security team member who is proficient in maintaining & managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.Duties and Responsibilities A- Minimum required Accountabilities for this role Role: A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert & risks. Key Responsibilities: Security Posture Monitoring: ? Implement and manage SIEM & CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint). ? Continuously assess cloud configurations for security risks and compliance violations. ? Monitor for drift from secure baselines and enforce remediation workflows. Risk Identification & Remediation: ? Detect misconfigurations, excessive permissions, and insecure storage or networking setups. ? Collaborate with cloud engineering and DevOps teams to remediate findings. ? Prioritize risks based on impact and likelihood. Incident Response & Forensics: ? Investigate alerts and anomalies flagged by CSPM tools. ? Support cloud incident response and post-mortem analysis. ? Maintain logs and evidence for forensic investigations. Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle. B- Additional Accountabilities pertaining to the role
? Manage & maintain security tool Microsoft Sentinel & Palo Alto Prisma ? Maintain compliance as per organization compliance policy ? Highlight risk & mitigation plan ? Work with SOC team to investigate security alerts and improve detection rules. ? Document security policies, configurations, and incident reports. ? Risk analysis and mitigation ? Vendor Co-ordination ? Strong troubleshooting, analytical, and communication skills ? Energetic, self-motivated and self-sufficient in accomplishing tasks. ? Good analytical and problem solving skills.Key Decisions / Dimensions • Identification of right contacts to channelise the issue/problem for closure. • Review the alert/incident and categorised True positive / False positive and take require steps. • Discuss observation response as applicable & improve security controls. • Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.|Potential regulatory actions due to non-compliancesMajor Challenges • Handling of fast changing environment with variety of cloud service providers • Handling of compliance expectations in stringent timelines • Handling multiple stakeholders at a time • Coordination with third party consultants who assist in auditing and compliance initiativesRequired Qualifications and Experience a) Qualifications Minimum 3+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP) Minimum 3+ years in Information / Cyber / application security.
b) Work Experience • Knowledge & hands-on experience on CSPM & CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM • Experience in Project management. • Positive attitude, Hard Worker and team player • Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage
