- Microsoft Defender for Cloud Implementation — Proven, hands-on expertise with Microsoft Defender for Cloud, including CSPM and Defender workload plans (CWPP), with demonstrated ability to design and deploy Defender capabilities at scale. 2.

Azure Security

Services &

- Configuration — Deep knowledge of Azure Policy (Audit/Deny/DeployIfNotOnce initiatives), Guest Configuration, Update Manager, Log Analytics, Key Vault, RBAC, and PIM/JIT access controls. 3.

Automated Posture

Management &

- Remediation — Experience implementing CNAPP/CSPM posture management with auto-remediation capabilities covering storage configurations, encryption, network controls, diagnostics, and resilience policies. 4.

Defender Plan

Coverage &

- Reporting — Ability to enable and manage Defender plans across multiple workload types (Servers, Storage, Key Vault, SQL, Resource Manager) with central coverage and cost reporting dashboards.
- Vulnerability &
- Patch Management Integration — Experience surfacing missing OS/package patches and exploitable CVEs, prioritising exploitable vulnerabilities, and integrating with Azure Update Manager for critical patch baselines and scheduled deployments.
- ServiceNow SecOps Integration — Demonstrated experience integrating Defender for Cloud findings with the ServiceNow SecOps module for feedback loops to infrastructure and application teams, with KPI/SLA dashboards.
- Multi-Vendor Environment Coordination — Comfortable operating in a multi-vendor delivery setting, coordinating across internal and external stakeholders.

Mandatory Skills:



CNAPP Services .

Profile description

- CIEM Concepts (Cloud Infrastructure Entitlement Management) — Familiarity with CIEM in Azure, including privileged access governance, service principal oversight, standing privilege detection, and role-assignment alerting.
- Identity &
- Privileged Access Posture — Experience detecting standing privileged RBAC and over-permissioned service principals, supporting shifts to just-in-time (JIT) and privileged identity management (PIM) with periodic access reviews.
- Multi-Cloud Posture Awareness — Understanding of AWS/GCP equivalent posture management solutions (given wider CSPM/CNAPP scope beyond Azure), enabling alignment with the broader multi-cloud security strategy.
- CTEM Lifecycle Alignment — Familiarity with Continuous Threat and Exposure Management (CTEM) phases (Scope, Discover, Prioritize, Validate, Mobilize) to ensure posture outputs feed the exposure-management lifecycle.
- Diagnostic &
- Logging Architecture — Experience configuring diagnostic settings to central Log Analytics for Key Vault, Storage, App Service, Logic Apps, and Event Hub with drift alerting capabilities.
- Network &
- Resilience Controls — Knowledge of network security controls, public network access restrictions, Azure Firewall configurations, and VM backup policy implementations within Defender for Cloud. 7.

Scanning Frequency

Automation — Experience supporting increased scanning frequency toward continuous as part of the broader automation goal across the cloud estate.

📌 Microsoft Defender for cloud specialist CNAPP/CSPM (Pune)
🏢 Wipro
📍 Pune