Job Responsibilities: 

• Define and enforce cloud security standards, governance guardrails, and compliance controls across AWS and Azure.
• Manage and enhance Cloud Security Posture Management (CSPM) to identify, prioritize, and remediate security risks, vulnerabilities, and compliance gaps.
• Implement automated security controls and policy-as-code using cloud-native governance and Infrastructure-as-Code tools.
• Strengthen Identity & Access Management (IAM) through least-privilege access, RBAC, access reviews, and secrets management.
• Integrate security and compliance checks into CI/CD pipelines and cloud provisioning processes to support DevSecOps practices.
• Support Cloud Detection & Response (CDR) and Extended Detection & Response (XDR) capabilities by integrating cloud security signals with SIEM, SOAR, and XDR platforms.
• Collaborate with Cyber Security, SOC, Cloud Architects, DevOps teams, and service owners to improve cloud threat detection, investigation, and incident response.
• Maintain continuous compliance through monitoring, logging, observability, drift detection, and audit readiness activities.
• Develop and maintain cloud security playbooks, standards, onboarding guidelines, and reusable secure architecture patterns.
• Support secure cloud onboarding, risk remediation, and governance initiatives while aligning security controls with operational and FinOps requirements.
• Manage compliance reporting, audit evidence collection, risk registers, exception handling, and remediation tracking.
• Drive continuous improvement of cloud security, governance, and compliance practices across the global cloud environment.

Job Requirements: 

• Bachelor’s degree in Computer Science, Information Technology, Cyber Security, Cloud Computing, Engineering, or a related discipline.
• 5+ years of experience in cloud security, cyber security, cloud engineering, or infrastructure operations, with hands-on exposure to AWS and/or Azure.
• Strong knowledge of cloud security technologies including CSPM/CNAPP, IAM, RBAC, workload protection, vulnerability management, and compliance frameworks (ISO 27001, NIST, CIS).
• Experience with cloud security and monitoring platforms such as Microsoft Defender for Cloud, Microsoft Sentinel, Defender XDR, Trend Vision One/Cloud One, or equivalent solutions.
• Hands-on experience with DevSecOps, Infrastructure-as-Code, and policy-as-code tools, including Terraform, Bicep, CloudFormation, Azure Policy, or AWS Service Control Policies (SCPs).