Role: CNAPP Container Security Engineer

Location: Pune/Hyd

Exp:- 7 to 12 Years

:

Must Haves

- Deep container and Kubernetes security domain knowledge: attack paths, escape risks, admission/runtime threats, and multi-tenant isolation.
- Strong cloud security architecture across AWS/Azure/GCP for containerized workloads (IAM, network segmentation, secrets, encryption, logging).
- Practical knowledge of securing Kubernetes container platforms and cloud services, including EKS / GKE/ AKS / Kubernetes
- Proven risk-based vulnerability and misconfiguration triage with clear remediation prioritization by business impact and materiality of the findings.
- Hands-on security control design & implementation: preventive guardrails and detective controls for Kubernetes/container platforms, creating and tuning threat detection rules/policies to deliver high-fidelity security findings.
- Experience working with security controls and governance reporting (coverage, gaps, KPIs, evidence).
- Strong understanding of software supply chain security (image provenance, SBOM, signing, registry controls, CI/CD security gates).
- Practical knowledge of benchmark/control mapping (CIS Kubernetes/Containers, NIST/ISO-aligned controls) and policy-to-control traceability.




- Ability to partner with SOC for detection relevance, threat applicability decisions, and high-fidelity alerting outcomes.
- Explicit stakeholder communication: translate technical findings into governance, risk, and control-owner actions.
- Scripting/automation for control validation and remediation workflows (Python, Bash, Policy as code, SQL, and data formats such as Graph, JSON, CSV, XML).
- Proven capability designing runtime security controls (audit and preventative) for containers/Kubernetes, with experience staging controls across multiple environments and managing rollout to avoid disruption.
- Hands on experience on one or more leading industry CNAPP solutions like Wiz, Prizma Cloud, CrowdStrike, Orca, Checkpoint CloudGuard, SentinelOne, Qualis TotalCloud, Tenable Cloud Security, FortiCNAPP, Aqua CNAPP
- Able to understand changing and rapidly shift threat landscapes and businesss need to respond to it in an agile manner

Nice-to-Haves

- Exposure to on-prem Kubernetes (bare metal/VMware) and hybrid/multi-cloud operating models.
- Threat modeling for cloud-native applications and Kubernetes platform components.
- Experience supporting regulated environments and audit evidence production.

📌 CNAPP Container Security Engineer (Hyderabad)
🏢 Purview Services
📍 Hyderabad