Key Responsibilities:

- Support Zero Trust security architecture and execute preventive, detective, and corrective controls across cloud-hosted infrastructure, platforms, containers, and applications.
- Monitor, assess, and report the security posture of cloud-native IaaS, PaaS, CaaS, and SaaS environments, including Nucleus.
- Manage security findings and perform end-to-end vulnerability management, including identification, assessment, risk-based prioritisation, tracking, remediation, validation, and closure using Prisma Cloud.
- Coordinate vulnerability management activities with application, infrastructure, platform, security, and business stakeholders, including exception handling, remediation planning, ageing reviews, and compliance reporting.
- Conduct container image and Kubernetes security assessments, vulnerability scanning, remediation, configuration hardening, and validation for CaaS platforms.
- Execute cloud infrastructure security assessments and configuration reviews against client security standards and applicable cloud-provider Well-Architected Framework guidance.
- Develop, maintain, test, and execute security automation using Infrastructure as Code, CROC scripts, and remediation scripts to improve operational efficiency and reduce security risk.
- Support application security activities, including vulnerability assessments, security reviews, remediation coordination, secure configuration validation, and closure evidence.
- Monitor, triage, and investigate security alerts, events, and threats through enterprise and cloud-native security monitoring platforms; escalate material risks in accordance with agreed procedures.
- Support security incident response activities, including analysis, containment, recovery, evidence collection, root-cause analysis, and corrective action tracking.
- Perform periodic access reviews and enforce identity, authentication, authorisation,



and privileged-access controls aligned with Zero Trust principles.
- Support audit, regulatory, compliance, and security governance requirements through evidence collection, control validation, reporting, and remediation tracking.
- Create and maintain security operational documentation, standard operating procedures, remediation runbooks, knowledge articles, and technical support records.
- Provide L3 troubleshooting, technical guidance, problem management, and escalations for complex cloud security issues; contribute to post-incident reviews and continual service improvement.

Required Technical Skills:

Mandatory

- Robust hands-on experience with Azure-native security services, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Microsoft Entra ID, Privileged Identity Management, Azure Key Vault, Network Security Groups, Azure Firewall, Web Application Firewall, and Azure Monitor / Log Analytics.
- Strong hands-on experience with Prisma Cloud for cloud security posture management, workload protection, vulnerability management, policy configuration, alert investigation, compliance reporting, and remediation tracking.
- Practical knowledge of Zero Trust, cloud security architecture, identity and access management, network security, data protection, logging, monitoring, and incident response.
- Experience securing containers and Kubernetes platforms, including image scanning, runtime findings, configuration assessment, secrets management, and hardening.




- Experience performing cloud security assessments and configuration reviews using cloud-provider Well-Architected Framework security guidance.
- Proficiency in at least two of the following scripting languages: Python, Bash, and PowerShell.
- Experience with Infrastructure as Code and security automation; ability to review or develop remediation scripts and reusable controls.
- Experience working with ITSM and ticketing platforms for incident, request, problem, change, vulnerability, and knowledge management.
- Secondary
- Working knowledge of AWS-native security services, such as AWS Security Hub, GuardDuty, Inspector, Config, IAM, KMS, CloudTrail, CloudWatch, Macie, Network Firewall, and Web Application Firewall.
- Ability to assess AWS security findings, support remediation, and interpret AWS-native security and compliance alerts.
- Experience and Qualifications
- Relevant experience in cloud security operations, engineering, or L3 support within a large enterprise environment.
- Demonstrated experience managing high-priority security findings, complex technical incidents, stakeholder escalations, and remediation dependencies.
- Good understanding of security governance, risk management, audit evidence, regulatory obligations, and control compliance.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience.

Preferred Certifications
- Microsoft Certified: Azure Administrator Associate or equivalent Azure administration certification.
- Microsoft Certified: Azure Security Engineer Associate or equivalent cloud security certification.
- AWS Certified Solutions Architect or SysOps Administrator certification.
- AWS Certified Security - Specialty.
- Prisma Cloud, CNAPP, Kubernetes, or other relevant cloud-native security certification.

📌 Cloud Security Engineer (Mumbai)
🏢 Wipro
📍 Mumbai