Job: Cloud Data Security Engineer

Location: Mumbai / Pune

Experience: 5-10 years

:

We are seeking an experienced and highly motivated Cloud Data Security Engineer to join our team. The ideal candidate will be responsible for ensuring the confidentiality, integrity, and availability of data stored and processed in cloud environments. You will work closely with cloud infrastructure teams, application developers, and security operations to design and implement robust data security measures within Azure cloud platform.

In this role, you will drive the security of data in the cloud, focusing on data encryption, access control, data loss prevention, and compliance to meet the organization's security and regulatory requirements.

Key Responsibilities:

- Implement data encryption strategies for data at rest, in transit, and in use across cloud environments using tools such as Azure Key Vault, Managed identity and other available security modules.
- Manage data access controls and enforce the least privilege access policies by integrating with identity and access management (IAM) systems (e.g., Azure Active Directory, Azure IAM).
- Develop and maintain Data Loss Prevention (DLP) strategies for protecting sensitive data from unauthorized access, leakage, or theft.
- Work with the compliance and legal teams to ensure that data security practices meet industry regulations such as GDPR, HIPAA, PCI-DSS, and other applicable standards.
- Implement data classification frameworks to identify, label, and apply security controls to data based on its sensitivity level.




- Collaborate with cloud architecture teams to ensure that data storage and processing solutions meet security and regulatory requirements.
- Conduct regular security assessments, vulnerability scans, and penetration testing on cloud data environments to identify and mitigate risks.
- Manage and monitor cloud security posture using Azure defender for cloud to detect and respond to security threats.
- Closely work with the Cloud Security team to Implement cloud-native security tools and technologies to ensure the protection of cloud-based data, including cloud firewalls, WAFs, and network segmentation.
- Automate the deployment of data security controls and policies through Infrastructure-as-Code (IaC) tools like Terraform, ARM Templates & Azure policies.
- Develop and manage cloud security logging, monitoring, and alerting tools such as Open Search, Azure Monitor, Analytics workspace to track access and modifications to sensitive data.
- Collaborate with DevOps and application teams to integrate security measures into CI/CD pipelines, ensuring secure development, deployment, and lifecycle management of applications and data.
- Stay up to date with emerging cloud security technologies, trends, and best practices related to data security.
- Provide security awareness and training to internal teams regarding cloud data security best practices.





Required Skills and Qualifications:

- Proven experience securing data in cloud environments (Azure), with a focus on data encryption, access control, and data protection.
- Strong knowledge of cloud encryption technologies, such as Azure Storage, Azure Key Vault, Data backups, and encryption standards (e.g., AES-256, TLS).
- Familiarity with Data Loss Prevention (DLP) strategies, technologies, and solutions in cloud environments.
- Strong experience with identity and access management (IAM) in cloud environments (e.g., Azure IAM, Azure Active Directory).
- Hands-on experience with cloud security posture management (CSPM) tools and services, such as Defender for Cloud.
- Knowledge of compliance frameworks such as GDPR, HIPAA, PCI-DSS, ISO 27001, and how they relate to cloud data security.
- Good to have experience with cloud-native data security tools, including WAFs, cloud firewalls, network segmentation, and data masking.
- Familiarity with cloud data storage services, such as Azure Blob Storage, and their security best practices.
- Experience in automating cloud infrastructure and security controls using Infrastructure-as-Code (IaC) tools like Terraform, CloudFormation, or ARM templates.
- Strong scripting skills (e.g., Python, PowerShell, Bash) to automate data security tasks and processes.
- Hands-on experience with cloud monitoring and logging tools to track and analyze cloud data security events.
- Robust communication skills and the ability to work effectively with both technical and non-technical stakeholders.

📌 Cloud Data Security Engineer_Mumbai (Mumbai)
🏢 Tata Consultancy Services
📍 Mumbai