Cyber Security Consultant - CSROCompany Profile: At CGI, we're a team of builders. We call our employees members because all who join CGI are building their own company - one that has grown to 72,000 professionals located in 40 countries. Founded in 1976, CGI is a leading IT and business process services firm committed to helping clients succeed.

We have the global resources, expertise, stability, and dedicated professionals needed to achieve results for our clients - and for our members. Come grow with us. Learn more at www.cgi.com.

This is a great chance to join a winning team. CGI offers a competitive compensation package with opportunities for growth and professional development.

Benefits for full-time, permanent members start on the first day of employment and include a paid time-off program and profit participation and stock purchase plans. We wish to thank all applicants for their interest and effort in applying for this position; however, only candidates selected for interviews will be contacted. No unsolicited agency referrals please.

Job Title: Cyber Security Consultant - CSRO

Position: Cyber Security Consultant - CSRO

Experience: 8 Years

Category: IT Infrastructure

Main location: Bangalore/Chennai

Position ID: J0726-0917

Employment Type: Full Time

Job Summary We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy-driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks.

Key Responsibilities

- Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config,



and Security Hub
- Implement preventive and detective controls aligned with enterprise security standards
- Enforce Zero Trust and least privilege principles across cloud workloads
- Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation
- Develop and manage security policies as code using JSON/YAML based frameworks
- Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates
- Maintain version controlled, reusable policy frameworks for scalable governance
- Enable continuous compliance monitoring, drift detection, and automated remediation
- Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization
- Translate risk findings into actionable guardrails and enforceable controls
- Improve overall security coverage across cloud assets using a risk-based approach
- Build secure by default Terraform modules for AWS environments
- Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows
- Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement
- Drive an automation-first approach to support agile,



consistent security enforcement at enterprise scale
- Support governance in Azure using Azure Policies and ARM templates as needed

Skills Required:

- Strong AWS security expertise (IAM, SCPs, Config, Security Hub)
- Experience with policy as code and automated security enforcement
- Hands-on with Terraform, ARM templates, and JSON-based policies
- Familiarity with Cortex / Wiz (CNAPP tools)
- Proficiency in Python / scripting and CI/CD (GitHub Actions)
- Solid understanding of risk assessment, Zero Trust, and compliance frameworks

Nice to Have:

- Azure security exposure
- AWS Security Specialty certification

This keeps it tight, security-led, and enterprise-focused, while clearly emphasizing:
- Guardrails & enforcement
- Policy as code (JSON/Terraform/ARM)
- CNAPP (Cortex/Wiz) risk-based approach
- Automation for large scale environments

Preferred Qualifications: We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have:

- Hands-on experience with Azure and AWS services to perform risk assessments and implement security guardrails
- Ability to develop and enforce security policies using CSPM/CNAPP
- Strong Infrastructure as Code skills with Terraform and ARM templates for secure deployments
- Proficiency in PowerShell scripting
- Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines

Locations:

- Cyber Security Consultant - CSRO

Category: Cyber Security

Main location: India, Karnataka, Bangalore

Position ID: J0726-0917

Employment Type: Full Time

📌 Cyber Security Consultant - CSRO (India)
🏢 Cgi Group
📍 India