Job Description

Key Responsibilities

End-to-End Cloud Security Solution Review & Design Assurance

- Conduct comprehensive design and architecture reviews of end-to-end cloud technology solutions, including cloud platforms (M365, Azure, AWS) and SaaS, PaaS, and IaaS implementations, ensuring security by design.
- Perform in-depth technical assessments of implemented technology solutions (on-premises and cloud) to identify misconfigurations, deviations from best practices, and potential attack vectors.
- Evaluate cloud security solutions against threat models, risk assessments, and industry-recognized frameworks (e.g., NIST CSF, CSA CCM, ISO 27001, CIS Benchmarks).
- Provide expert security recommendations and architectural guidance to Risk, InfoSec, and Enterprise IT leadership, as well as to client-facing processes.

Cloud Security Posture Management & Compliance Assurance

- Lead and execute Cloud Security Posture Management (CSPM) reviews using CNAPP (Cloud-Native Application Protection Platform) tools to assess cloud security posture, cloud identity protection (CIEM), workload protection, and container security.
- Run regular compliance scans of cloud resources against standards such as HIPAA, GDPR, PCI DSS, and SOC 2, and drive continuous improvement of compliance posture.
- Review and provide feedback on cloud security policies, procedures,



and hardening documents, ensuring alignment with CIS benchmarks and organizational InfoSec policies.
- Conduct cloud risk assessments to identify threats, vulnerabilities, and misconfigurations that could impact IT operations and sensitive data.

Secure Cloud Development & Operations Practices

- Collaborate with Enterprise IT and DevOps teams to embed security throughout the SDLC and CI/CD pipelines.
- Review Infrastructure as Code (IaC) templates and automation scripts for security flaws, guiding teams on secure IaC best practices.
- Participate in cloud attack path analysis to understand adversary techniques and design preventative and detective controls.
- Ensure CIS and other security best practices are rigorously applied across recent and existing applications, products, and cloud infrastructure.

Security Governance & Remediation Oversight

- Partner with cross-functional teams to track and drive remediation of identified security vulnerabilities and misconfigurations.
- Contribute to the continuous improvement of cloud security governance frameworks and processes.
- Act as a subject matter expert for incident response and forensic readiness related to cloud security incidents.
- Collaborate on cloud attack path analysis across teams.

📌 Cloud Security Consultant - Information Compliance Security : CNAPP, CSPM & Multi-Cloud Exp -8 - 12 Yrs | Job Location : Gurgaon, Mumbai (Gurugram)
🏢 Wns Global Services
📍 Gurugram