Position Name : Cloud/App Security Specialist

Experience : 6+ Years

Location : Bangalore, India

Job Type : Permanent/Full Time

Work Mode : Hybrid

Notice Period : Immediate-15 Days/30 days

Role Summary :

We are seeking an experienced Cloud Security Engineer to drive (Hands-On) cloud and infrastructure security. The role focuses on cloud security, CNAPP tools, EDR solutions, cloud posture management, patching, IaC security, and SIEM/SOC collaboration. You will secure enterprise workloads, implement automated compliance controls, and coordinate with SOC and DevOps teams while communicating risks and remediation clearly to stakeholders.

Key Responsibilities :

Cloud & Infrastructure Security :

- OWASP-DT Platform Administration.

- Amazon GuardDuty, AWS Inspector, IaC with Terraform, SSM Agent, SSM Document, Good knowledge in AWS Infrastructure, Linux, Ec2, Lambda Function.

- Harden Linux/Windows workloads using CIS Benchmarks/STIGs.

- Implement least privilege access and manage secrets securely.

CNAPP & Cloud Posture Management :

- Continuously monitor cloud workloads using CNAPP platforms.

- Assess and remediate misconfigurations and drift against CIS/NIST/internal standards.

EDR & Threat Detection :

- Deploy and manage EDR solutions.

- Integrate endpoint and cloud logs into SIEM.

- Participate in SOC operations, incident response, and threat hunting.

Patch Management & Vulnerability Remediation :

- Lead automated patching workflows for servers, containers, and cloud services.

- Conduct vulnerability scanning and remediation.

- Automate security operations to reduce manual toil.

Compliance & Governance :

- Maintain compliance with ISO 27001, NIST, CIS, GDPR, HIPAA.

- Generate audit reports, track remediation actions, and conduct risk assessments.

Communication & Collaboration :

- Act as a security liaison between DevOps, SOC, and business teams.

- Communicate risks, remediation plans, and posture findings to technical and non-technical stakeholders.

- Promote security best practices across teams.

Required Skills & Expertise (Must have) :

- OWASP-DT Tool Platform Administration (MUST HAVE)

- Cloud Security & CNAPP: AWS, GCP

- EDR & Endpoint Security

- Cloud Posture Management & IaC Security: Terraform, CloudFormation

- Patch & Vulnerability Management: Automated patching in AWS/GCP

- Threat Detection & SOC/SIEM: CloudWatch, Trend Micro Vision One, Cloudtrail

- Linux & Windows Security: OS hardening, permissions, network security

- Scripting & Automation: Python, Bash, (Any)

- Compliance & Governance: ISO 27001, NIST, CIS, GDPR, HIPAA

- Soft Skills: Strong communication, documentation, cross-team collaboration