Job Purpose
Information security team member who is proficient in maintaining & managing Cloud Security (Cloud SOC) CSPM Container security Kubernetes VA management.
Duties and Responsibilities
A-Minimum required Accountabilities for this role
Role: A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS Azure GCP) by identifying misconfigurations enforcing compliance and mitigating alert & risks.
Key Responsibilities:
Security Posture Monitoring:
Implement and manage SIEM & CSPM tools (e.g. Microsoft Sentinel Palo Alto Prisma Cloud Wiz Orca Microsoft Defender for Cloud/Endpoint).
Continuously assess cloud configurations for security risks and compliance violations.
Monitor for drift from secure baselines and enforce remediation workflows.
Risk Identification & Remediation:
Detect misconfigurations excessive permissions and insecure storage or networking setups.
Collaborate with cloud engineering and DevOps teams to remediate findings.
Prioritize risks based on impact and likelihood.
Incident Response & Forensics:
Investigate alerts and anomalies flagged by CSPM tools.
Support cloud incident response and post-mortem analysis.
Maintain logs and evidence for forensic investigations.
Role: Focuses on securing containerized environments (e.g. Docker Kubernetes) and integrating security into the software development lifecycle.
B-Additional Accountabilities pertaining to the role

Manage & maintain security tool Microsoft Sentinel & Palo Alto Prisma
Maintain compliance as per organization compliance policy
Highlight risk & mitigation plan




Work with SOC team to investigate security alerts and improve detection rules.
Document security policies configurations and incident reports.
Risk analysis and mitigation
Vendor Co-ordination
Solid troubleshooting analytical and communication skills
Energetic self-motivated and self-sufficient in accomplishing tasks.
Good analytical and problem solving skills.
Key Decisions / Dimensions
Identification of right contacts to channelise the issue/problem for closure.
Review the alert/incident and categorised True positive / False positive and take require steps.
Discuss observation response as applicable & improve security controls.
Decide if the policy and procedure documents need changes based on new regulations or audit regulatory actions due to non-compliances
Major Challenges
Handling of fast changing environment with variety of cloud service providers
Handling of compliance expectations in stringent timelines
Handling multiple stakeholders at a time
Coordination with third party consultants who assist in auditing and compliance initiatives
Required Qualifications and Experience
a)Qualifications
Minimum 3 years of experience in Cloud Security Posture management Cloud workload protection. (CSPM CWP)
Minimum 3 years in Information / Cyber / application security.

b)Work Experience
Knowledge & hands-on experience on CSPM & CWP tool administration. Experience in PaloAlto Prisma AV/EDR SIEM (Microsoft Sentinel) Vulnerability management tool FIM
Experience in Project management.
Positive attitude Hard Worker and team player
Certifications like CEH (Ethical Hacking) Azure/AWS Security application penetration testing would be an added advantage

Required Experience:

Manager

📌 Cluster Manager Information SecuritySenior Cluster Manager Information Security (Pune)
🏢 Bajaj Finance
📍 Pune