Role : Cloud Native Application Protection (CNAPP)

Experience: 7 to 12 Years

Location: Pune

Notice period: Serving NP/30 Days

Shifts: Should be comfortable for rotations must

Work model: Should be comfortable for both Hybrid and complete 5 days WFO

Job Description

We are seeking a skilled and motivated Cloud Security Engineer to join the CTE to support the deployment and operationalisation of a Cloud Native Application Protection (CNAPP) service across multi-cloud environments. You will work closely with software engineers, cloud platform teams, operations to ensure our services meet availability and performance goals.

Responsibilities

- Implement cloud security guard rails using CNAPP tools across multi-cloud environments (AWS, GCP, Azure) to meet security requirements.
- Implement changes to CNAPP platform using DevOps pipeline and infrastructure as code (Terraform cloud formation etc.) to apply changes.
- Write script to extract cloud security data point for global reporting e.g. python,
- Review and assess cloud security findings (permissions, misconfigurations, detections), out of box vendor rules,



accuracy of detection and identify false positives to fine tune the solution.
- Partner with cloud architects, DevOps, IT Service owners, and SOC teams to ensure cloud security controls are met, and support incidents management when required.

Requirements

- Hands on experience with cloud native application security solution and cloud security posture management tools e.g. CrowdStrike, Wiz, Orca, Prisma cloud
- Cyber security experience with cloud security (AWS, GCP, Azure, AliCloud) risks and controls does a violation present a material risk, why and potential impact.
- Robust collaboration and stakeholders management
- Experience in building and deploying applications on the Cloud, using CI/CD frameworks and Infrastructure automation, such as: Jenkins, Terraform, Ansible, GitHub, Nexus and Jenkins.
- Extensive working knowledge of software development tools and technologies; specifically, Python, Bash, PowerShell, SQL, and data formats such as XML, JSON, CSV
- Nice to have: CSP security certificate e.g. AWS/GCP/Azure certified security speciality,

📌 Cloud Native Application Protection (Gurugram)
🏢 Purview Services
📍 Gurugram