Job Description:

- Lead implement and management of CSPM capabilities to provide unified visibility of risks, misconfigurations, and insecure assets across Azure subscriptions and resource groups.

- Lead design, implement, and governance of Cloud Security Posture Management (CSPM) capabilities across multi-cloud and hybrid environments, providing unified visibility into risks, misconfigurations, insecure assets, and policy violations.

- Define and institutionalize cloud security posture evaluation frameworks, leveraging industry benchmarks (CIS, NIST, ISO 27001) and provider-native security scores to continuously measure and improve risk posture.

- Drive advanced risk correlation, combining cloud misconfigurations, vulnerabilities, identity and access permissions, and exposure data to identify end-to-end attack paths and prioritize remediation based on business impact.

- Lead secure architecture reviews for complex cloud workloads, including IaaS, PaaS, containerized platforms, and hybrid integrations, ensuring alignment with security-by-design principles.

- Define and enforce Zero Trust architecture patterns across cloud services and hybrid workloads, covering identity, network segmentation, workload isolation, and least-privilege access.

- Act as a trusted security advisor to enterprise and cloud architects,



embedding security controls, guardrails, and governance into all current cloud initiatives and transformation programs.

- Oversee the integration of CSPM and cloud security telemetry into SIEM/SOAR platforms, enabling centralized monitoring, threat correlation, and automated response workflows.

- Define security playbooks and response workflows for cloud misconfigurations, exposure risks, identity abuse, and non-compliant resources, ensuring operational consistency at scale.

- Provide technical leadership and guidance to SOC and cloud operations teams in interpreting cloud security alerts and responding to emerging threats across cloud environments.

- Ensure policy enforcement and governance controls are consistently applied across cloud accounts, subscriptions, and projects to meet regulatory and internal security standards.

- Deliver audit-ready compliance dashboards and executive reports for senior leadership, risk committees, and external regulators.

- Drive continuous improvement initiatives to enhance compliance scores, reduce risk posture gaps, and improve mean time to remediation (MTTR) across cloud environments.

- Mentor and upskill L1/L2/L3 cloud security engineers and analysts.

📌 Cloud CSPM (Panvel)
🏢 Acme Services Private
📍 Panvel