Provide L3 operational support for clients cloud security, with primary accountability for Azure-native security controls and Prisma Cloud. The role will strengthen Zero Trust adoption, security posture management, vulnerability remediation, threat monitoring, incident response, automation, and compliance across cloud-hosted infrastructure, platforms, containers, and applications. AWS-native security services will be supported as a secondary capability.

Key Responsibilities

- Support Zero Trust security architecture and execute preventive, detective, and corrective controls across cloud-hosted infrastructure, platforms, containers, and applications.
- Monitor, assess, and report the security posture of cloud-native IaaS, PaaS, CaaS, and SaaS environments, including Nucleus.
- Manage security findings and perform end-to-end vulnerability management, including identification, assessment, risk-based prioritisation, tracking, remediation, validation, and closure using Prisma Cloud.
- Coordinate vulnerability management activities with application, infrastructure, platform, security, and business stakeholders, including exception handling, remediation planning, ageing reviews, and compliance reporting.
- Conduct container image and Kubernetes security assessments, vulnerability scanning, remediation, configuration hardening, and validation for CaaS platforms.
- Execute cloud infrastructure security assessments and configuration reviews against client’s security standards and applicable cloud-provider Well-Architected Framework guidance.
- Develop, maintain, test, and execute security automation using Infrastructure as Code, CROC scripts, and remediation scripts to improve operational efficiency and reduce security risk.
- Support application security activities, including vulnerability assessments, security reviews, remediation coordination, secure configuration validation, and closure evidence.
- Monitor, triage, and investigate security alerts, events, and threats through enterprise and cloud-native security monitoring platforms; escalate material risks in accordance with agreed procedures.
- Support security incident response activities, including analysis, containment, recovery, evidence collection, root-cause analysis, and corrective action tracking.
- Perform periodic access reviews and enforce identity, authentication, authorisation, and privileged-access controls aligned with Zero Trust principles.
- Support audit, regulatory, compliance,



and security governance requirements through evidence collection, control validation, reporting, and remediation tracking.
- Create and maintain security operational documentation, standard operating procedures, remediation runbooks, knowledge articles, and technical support records.
- Provide L3 troubleshooting, technical guidance, problem management, and escalations for complex cloud security issues; contribute to post-incident reviews and continual service improvement.

Required Technical Skills

Mandatory

- Strong hands-on experience with Azure-native security services, including Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Microsoft Entra ID, Privileged Identity Management, Azure Key Vault, Network Security Groups, Azure Firewall, Web Application Firewall, and Azure Monitor / Log Analytics.
- Strong hands-on experience with Prisma Cloud for cloud security posture management, workload protection, vulnerability management, policy configuration, alert investigation, compliance reporting, and remediation tracking.
- Practical knowledge of Zero Trust, cloud security architecture, identity and access management, network security, data protection, logging, monitoring, and incident response.
- Experience securing containers and Kubernetes platforms, including image scanning, runtime findings, configuration assessment, secrets management, and hardening.
- Experience performing cloud security assessments and configuration reviews using cloud-provider Well-Architected Framework security guidance.
- Proficiency in at least two of the following scripting languages: Python, Bash, and PowerShell.
- Experience with Infrastructure as Code and security automation; ability to review or develop remediation scripts and reusable controls.
- Experience working with ITSM and ticketing platforms for incident, request, problem, change, vulnerability, and knowledge management.

Secondary

- Working knowledge of AWS-native security services, such as AWS Security Hub, GuardDuty, Inspector, Config, IAM, KMS, CloudTrail, CloudWatch, Macie, Network Firewall, and Web Application Firewall.




- Ability to assess AWS security findings, support remediation, and interpret AWS-native security and compliance alerts.

Experience and Qualifications

- Relevant experience in cloud security operations, engineering, or L3 support within a large enterprise setting.
- Demonstrated experience managing high-priority security findings, complex technical incidents, stakeholder escalations, and remediation dependencies.
- Good understanding of security governance, risk management, audit evidence, regulatory obligations, and control compliance.
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline, or equivalent relevant professional experience.

Preferred Certifications

- Microsoft Certified: Azure Administrator Associate or equivalent Azure administration certification.
- Microsoft Certified: Azure Security Engineer Associate or equivalent cloud security certification.
- AWS Certified Solutions Architect or SysOps Administrator certification.
- AWS Certified Security - Specialty.
- Prisma Cloud, CNAPP, Kubernetes, or other relevant cloud-native security certification.

Soft Skills

- Strong written and verbal communication, with the ability to explain security risk, remediation actions, and operational impact clearly to technical and non-technical stakeholders.
- Strong documentation discipline with the ability to create accurate runbooks, knowledge articles, incident records, and compliance evidence.
- Effective stakeholder management, ownership, leadership, and coordination across distributed global teams.
- Analytical problem-solving, attention to detail, sound judgement, and the ability to manage competing priorities in a security operations environment.
- Proactive mindset focused on automation, risk reduction, service reliability, and continual improvement.

Success Measures

- Timely triage, prioritisation, remediation, validation, and closure of cloud security findings.
- Improved compliance with client’s security standards and reduced recurrence of security misconfigurations.
- Accurate incident handling, root-cause analysis, operational reporting, and audit evidence.
- Increased use of automated controls and remediation scripts to reduce manual effort and operational risk.
- Clear ownership, stakeholder communication, and high-quality knowledge documentation.Role & responsibilities

Preferred candidate profile

📌 Azure Native Security (Bengaluru)
🏢 Tanisha Systems
📍 Bengaluru