Requirements

Must Haves

- Deep container and Kubernetes security domain knowledge: attack paths, escape risks, admission/runtime threats, and multi-tenant isolation.

- Robust cloud security architecture across AWS/Azure/GCP for containerized workloads (IAM, network segmentation, secrets, encryption, logging).

- Practical knowledge of securing Kubernetes container platforms and cloud services, including EKS / GKE/ AKS / Kubernetes

- Proven risk-based vulnerability and misconfiguration triage with clear remediation prioritization by business impact and materiality of the findings.

- Hands-on security control design & implementation: preventive guardrails and detective controls for Kubernetes/container platforms, creating and tuning threat detection rules/policies to deliver high-fidelity security findings.

- Experience working with security controls and governance reporting (coverage, gaps, KPIs, evidence).

- Strong understanding of software supply chain security (image provenance, SBOM, signing, registry controls, CI/CD security gates).

- Practical knowledge of benchmark/control mapping (CIS Kubernetes/Containers, NIST/ISO-aligned controls) and policy-to-control traceability.

- Ability to partner with SOC for detection relevance, threat applicability decisions,



and high-fidelity alerting outcomes.

- Clear stakeholder communication: translate technical findings into governance, risk, and control-owner actions.

- Scripting/automation for control validation and remediation workflows (Python, Bash, Policy as code, SQL, and data formats such as Graph, JSON, CSV, XML).

- Proven capability designing runtime security controls (audit and preventative) for containers/Kubernetes, with experience staging controls across multiple environments and managing rollout to avoid disruption.

- Hands on experience on one or more leading industry CNAPP solutions like Wiz, Prizma Cloud, CrowdStrike, Orca, Checkpoint CloudGuard, SentinelOne, Qualis TotalCloud, Tenable Cloud Security, FortiCNAPP, Aqua CNAPP

- Able to understand changing and rapidly shift threat landscapes and businesss need to respond to it in an agile manner

Nice-to-Haves

- Exposure to on-prem Kubernetes (bare metal/VMware) and hybrid/multi-cloud operating models.

- Threat modeling for cloud-native applications and Kubernetes platform components.

- Experience supporting regulated environments and audit evidence production.

📌 WIZ Container Security (Hyderabad)
🏢 Purview Services
📍 Hyderabad