Job Summary

We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks.

Position Details

- Job Title: Cyber Security Consultant CSRO
- Experience: 8+ Years
- Category: IT Infrastructure
- Main location: Bangalore/Chennai
- Employment Type: Full Time

Key Responsibilities
- Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config, and Security Hub
- Implement preventive and detective controls aligned with enterprise security standards
- Enforce Zero Trust and least privilege principles across cloud workloads
- Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation
- Develop and manage security policies as code using JSON/YAML based frameworks
- Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates
- Maintain version controlled, reusable policy frameworks for scalable governance
- Enable continuous compliance monitoring, drift detection, and automated remediation
- Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization




- Translate risk findings into actionable guardrails and enforceable controls
- Improve overall security coverage across cloud assets using a risk based approach
- Build secure by default Terraform modules for AWS environments
- Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows
- Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement
- Drive an automation first approach to support agile, consistent security enforcement at enterprise scale
- Support governance in Azure using Azure Policies and ARM templates as needed

Skills
- Cloud Security Audit
- Identity and access mgt (IAM)
- Risk management
- Security assessment
- Terraform

Nice to Have
- Azure security exposure
- AWS Security Specialty certification

Preferred Qualifications
- Hands on experience with Azure and AWS services to perform risk assessments and implement security guardrails.
- Ability to develop and enforce security policies using CSPM/CNAPP
- Robust Infrastructure as Code skills with Terraform and ARM templates for secure deployments.
- Proficiency in PowerShell scripting
- Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.

📌 Cyber Security Consultant - CSRO (Bengaluru)
🏢 CGI
📍 Bengaluru