Job Description

Cloud Security Lead

n

Role Purpose

n

You will be responsible for ensuring the real-time security posture of the cloud platform and applications, including detection, validation, and response to vulnerabilities, threats, and misconfigurations.

n

You will act as the independent security control function, ensuring that all infrastructure and platforms built and operated by engineering teams remain secure, resilient, and free from exploitable risks.

n

Key Responsibilities

n

Cloud Security Posture Management

n

You will own and operate cloud security platforms such as Palo, Qualys, Zscaler to continuously monitor infrastructure, workloads, and configurations.

n

You will ensure that no insecure or non-compliant workloads exist in the environment by driving timely remediation of vulnerabilities and misconfigurations.

n

Threat Detection & Response

n

You will own the security monitoring and threat detection ecosystem using platforms such as Palo SIEM.

n

You will detect, investigate, and coordinate response to security incidents, anomalous behaviours, and potential breaches.

n

You will define and implement incident response playbooks in collaboration with SRE and Platform teams.

n

Identity & Access Validation

n

You will validate identity and access controls across the platform, including IAM configurations, role definitions, and privileged access mechanisms.

n

You will ensure that privileged access is secure, compliant, and fully traceable through systems such as CyberArk.

n

Validation of Security Remediation

n

You will act as the technical validator of all security-related fixes, ensuring that vulnerabilities and risks have been fully addressed.

n

You will revalidate fixes and ensure that no residual risks remain before issues are considered closed.

n

Proactive Risk Management

n

You will continuously identify potential risks, weak configurations, and emerging threat vectors across the environment.

n

You will provide recommendations to Platform Engineering teams to improve architecture, controls, and security posture.

n

Penetration testing & Read teaming Management

n

You will ensure the effectiveness of SOC, IAM, PAM, cloud security controls, and incident response, while penetration testing is performed more frequently on applications, infrastructure, and cloud environments.

n

Collaboration with Platform & Governance

n

You will raise findings to Platform and SRE teams for remediation and track them to closure.

n





You will support Governance teams by providing evidence, validation, and insights required for audits and compliance.

n

Experience & Skills

n

You bring 10–15 years of experience in cloud security, cybersecurity operations, or threat management roles.

n

You have strong expertise in cloud security posture management tools, SIEM platforms, vulnerability management and penetration testing.

n

You have experience implementing Zero Trust and identity security frameworks.

n

You have experience in managing app security as well deployed on CI/CD.

n

Experience in BFSI or regulated environments is preferred.

n

What We Look For

n

You have a strong security mindset for business and the ability to proactively identify risks.

n

You are detail-oriented and evidence-driven in your approach.

n

You are comfortable validating and challenging technical implementations.

n

You can operate effectively as an independent control function while collaborating with engineering teams. Cloud Security Lead

n

Mahindra Manulife – Digital First, AI-Native Insurer (Life & Health)

n

Role Purpose

n

You will be responsible for ensuring the real-time security posture of the cloud platform and applications, including detection, validation, and response to vulnerabilities, threats, and misconfigurations.

n

You will act as the independent security control function, ensuring that all infrastructure and platforms built and operated by engineering teams remain secure, resilient, and free from exploitable risks.

n

Key Responsibilities

n

Cloud Security Posture Management

n

You will own and operate cloud security platforms such as Palo, Qualys, Zscaler to continuously monitor infrastructure, workloads, and configurations.

n

You will ensure that no insecure or non-compliant workloads exist in the environment by driving timely remediation of vulnerabilities and misconfigurations.

n

Threat Detection & Response

n

You will own the security monitoring and threat detection ecosystem using platforms such as Palo SIEM.

n

You will detect, investigate, and coordinate response to security incidents,



anomalous behaviours, and potential breaches.

n

You will define and implement incident response playbooks in collaboration with SRE and Platform teams.

n

Identity & Access Validation

n

You will validate identity and access controls across the platform, including IAM configurations, role definitions, and privileged access mechanisms.

n

You will ensure that privileged access is secure, compliant, and fully traceable through systems such as CyberArk.

n

Validation of Security Remediation

n

You will act as the technical validator of all security-related fixes, ensuring that vulnerabilities and risks have been fully addressed.

n

You will revalidate fixes and ensure that no residual risks remain before issues are considered closed.

n

Proactive Risk Management

n

You will continuously identify potential risks, weak configurations, and emerging threat vectors across the environment.

n

You will provide recommendations to Platform Engineering teams to improve architecture, controls, and security posture.

n

Penetration testing & Read teaming Management

n

You will ensure the effectiveness of SOC, IAM, PAM, cloud security controls, and incident response, while penetration testing is performed more frequently on applications, infrastructure, and cloud environments.

n

Collaboration with Platform & Governance

n

You will raise findings to Platform and SRE teams for remediation and track them to closure.

n

You will support Governance teams by providing evidence, validation, and insights required for audits and compliance.

n

Experience & Skills

n

You bring 10–15 years of experience in cloud security, cybersecurity operations, or threat management roles.

n

You have solid expertise in cloud security posture management tools, SIEM platforms, vulnerability management and penetration testing.

n

You have experience implementing Zero Trust and identity security frameworks.

n

You have experience in managing app security as well deployed on CI/CD.

n

Experience in BFSI or regulated environments is preferred.

n

What We Look For

n

You have a strong security mindset for business and the ability to proactively identify risks.

n

You are detail-oriented and evidence-driven in your approach.

n

You are comfortable validating and challenging technical implementations.

n

You can operate effectively as an independent control function while collaborating with engineering teams.

📌 Cloud Security Lead (Mumbai)
🏢 Simelabs - Digital, AI/ML, Automation, Robotics, Gen AI.
📍 Mumbai