Role Overview

We are seeking a highly skilled Cloud Security Engineer to design, implement, and manage our next-generation security architecture. The ideal candidate will be the subject matter expert for our Secure Service Edge (SSE) stack, ensuring that our data, users, and applications remain secure regardless of location. You will bridge the gap between network security and endpoint protection, utilizing a Zero Trust framework to mitigate modern cyber threats.

Key Responsibilities

Architect & Manage SASE/SSE: Lead the deployment and optimization of Cloud Access Security Broker (CASB), Secure Web Gateway (SWG), and ZTNA solutions to provide seamless, secure access to private and SaaS applications.

Data Protection: Develop and maintain Data Loss Prevention (DLP) policies across cloud and web channels to prevent unauthorized data exfiltration.

Zero Trust Implementation: Transition legacy VPN architectures to Zero Trust Network Access (ZTNA), ensuring principle-of-least-privilege access.

Incident Response & Threat Hunting: Support the SOC team by analyzing alerts from EDR/XDR platforms and leading forensic investigations during security incidents.

Vulnerability Management: Oversee the identification and remediation of vulnerabilities across cloud environments and endpoints.

Continuous Monitoring: Leverage MDR services and internal tools to monitor for sophisticated threats and refine detection logic.

Required Skills & Qualifications

Primary Technical Skills:

Expertise in SSE (Secure Service Edge)



components: CASB, SWG, and ZTNA.

Deep understanding of SASE architecture and cloud-native security.

Proven experience implementing DLP strategies in a distributed environment.

Strong knowledge of Cloud Security posture and identity providers (IdP).

Secondary Technical Skills:

Hands-on experience with EDR/XDR tools (e.g., CrowdStrike, SentinelOne, Microsoft Defender).

Experience in a SOC environment including Incident Response, Forensics, and Analysis.

Proficiency in Vulnerability Management lifecycles and tools.

Experience:

A minimum of 2+ years of dedicated experience in Cloud Security, Network Security, or a related cybersecurity domain.

Recommended Certifications To ensure the candidate has the technical depth required for these specific tools, look for the following:

Vendor-Specific (Highly Recommended)

Netskope: Netskope Cloud Security Administrator (NSK101) or Integrator (NSK200).

Zscaler: Zscaler Certified Cloud Administrator (ZCCA) or Zscaler Certified Cloud Professional (ZCCP) in Internet Access (ZIA) or Private Access (ZPA).

Palo Alto Networks: Prisma Access (Sourcing SASE) or PCNSA/PCNSE.

Vendor-Neutral & Professional

CCSK (Certificate of Cloud Security Knowledge) – Cloud Security Alliance.

CCSP (Certified Cloud Security Skilled) – ISC².

CompTIA Security+ or CySA+ (For the SOC/Incident Response foundation).

GCIH (GIAC Certified Incident Handler) for the forensics and IR requirement.

📌 Cloud Engineer (Pune)
🏢 CJET Tech Solutions
📍 Pune