Cloud Vulnerability Management Engineer

Job Title : Cloud Vulnerability Management Engineer

Experience : 4 to 8 Years

Location : Pune / Bangalore / Hyderabad / Mumbai (Hybrid)

Employment Type : Full-time

Job Overview :

We are seeking a skilled Cloud Vulnerability Management Engineer to strengthen our cloud security posture through proactive identification, assessment, and remediation of vulnerabilities. This role is integral to our Continuous Threat Exposure Management (CTEM) program and focuses on securing cloud environments using advanced security assessment tools and best practices.

Key Responsibilities :

- Leverage cloud security assessment tools (CNAPP / CSPM / CWPP) to monitor cloud assets for vulnerabilities and configuration weaknesses as part of CTEM implementation

- Own and manage the end-to-end Vulnerability Management (VM) lifecycle across cloud environments

- Implement cloud security controls (out-of-the-box and custom) in collaboration with security architects and SMEs

- Ensure adherence to industry security standards and compliance frameworks

- Investigate and triage false positives, risk acceptance requests, and risk rating adjustments

- Respond to zero-day vulnerabilities by rapidly assessing impact and driving remediation actions

- Perform deep-dive vulnerability analysis and special security investigations

- Develop and enhance reports, dashboards, and metrics for vulnerability tracking and risk posture

- Collaborate with engineering and platform teams to tune scanning tools, improve detection coverage, and meet security objectives

- Drive continuous improvement in vulnerability detection, prioritization, and remediation processes

Required Skills & Qualifications :

- 4+ years of experience in :

1. Vulnerability Management

2. Cloud Security Engineering

3. Cyber Security in cloud environments

- Strong hands-on experience with :

1. Cloud platforms : AWS / Azure / GCP

2. Vulnerability and cloud security tools :

i. CNAPP (Cloud-Native Application Protection Platform)

ii. CSPM (Cloud Security Posture Management)

iii. CWPP (Cloud Workload Protection Platform)

- Solid understanding of :

1. Vulnerability assessment, prioritization, and remediation

2. Cloud security fundamentals (IAM, networking, storage, compute)

3. Security frameworks and compliance standards

Good to Have :

- Experience with CTEM (Continuous Threat Exposure Management) frameworks

- Familiarity with tools like Prisma Cloud, Wiz, Lacework, or Microsoft Defender for Cloud

- Exposure to DevSecOps practices and CI/CD security integration

- Scripting/automation skills (Python, Bash)

- Relevant certifications :

1. AWS Security Specialty

2. Azure Security Engineer

3. CISSP / CEH

Key Competencies :

- Ability to handle time-sensitive security escalations and zero-day events

- Effective stakeholder communication and collaboration

- Proactive, detail-oriented, and investigative mindset