Position Description
Your future duties and responsibilities
JD
kube-benchChecks whether Kubernetes is deployed securely by running tests from the CIS Kubernetes Benchmark.
kubeaudit Audits Kubernetes clusters f or various security concerns, such as running containers as non-root.
KubiScan Helps identify RBAC permissions that could be exploited by attackers.
Peirates A penetration tool that automates known techniques to steal service account tokens, secrets, and gain cluster control.
kube-hunter Actively hunts for security weaknesses within Kubernetes clusters.
Control Plane APIs The main entry point for managing the cluster, often targeted for initial access and privilege escalation. Default ports are often 6443 or 8443.
Nodes The virtual or physical machines running the pods. Misconfigurations here can lead to access to all pods on the node.
Role-Based Access Control (RBAC) Misconfigured permissions can allow attackers to gain excessive privileges and access sensitive data like secrets.
etcd data store If compromised, an attacker can view secrets in plaintext,
impersonate system components, and modify or delete the entire cluster state.
Cloud Metadata Endpoints Querying these endpoints can reveal details about the underlying cloud setting.
LI-SG41
Required qualifications to be successful in this role
Job Title: Cloud Security Consultant
Position: Senior Software Engineer
Experience : 3 to 5 Years
Category: Main location: Bangalore/Chennai/Hyderabad
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relations
📌 Kubernetes Based Penetration Testing (Bengaluru)
🏢 CGI
📍 Bengaluru