Cloud Native Application Protection

Role : Cloud Native Application Protection (CNAPP)

Experience: 7 to 12 Years

Location: Pune

Notice period: Serving NP/30 Days

Shifts: Should be comfortable for rotations must

Work model: Should be comfortable for both Hybrid and complete 5 days WFO

Job Description

We are seeking a skilled and motivated Cloud Security Engineer to join the CTE to support the deployment and operationalisation of a Cloud Native Application Protection (CNAPP) service across multi-cloud environments. You will work closely with software engineers, cloud platform teams, operations to ensure our services meet availability and performance goals.

Responsibilities

• Implement cloud security guard rails using CNAPP tools across multi-cloud environments (AWS, GCP, Azure) to meet security requirements.
• Implement changes to CNAPP platform using DevOps pipeline and infrastructure as code (Terraform cloud formation etc.) to apply changes.
• Write script to extract cloud security data point for global reporting e.g. python,
• Review and assess cloud security findings (permissions, misconfigurations, detections), out of box vendor rules, accuracy of detection and identify false positives to fine tune the solution.
• Partner with cloud architects, DevOps, IT Service owners, and SOC teams to ensure cloud security controls are met, and support incidents management when required.

Requirements

• Hands on experience with cloud native application security solution and cloud security posture management tools e.g. CrowdStrike, Wiz, Orca, Prisma cloud
• Cyber security experience with cloud security (AWS, GCP, Azure, AliCloud) risks and controls does a violation present a material risk, why and potential impact.
• Strong collaboration and stakeholders management
• Experience in building and deploying applications on the Cloud, using CI/CD frameworks and Infrastructure automation, such as: Jenkins, Terraform, Ansible, GitHub, Nexus and Jenkins.
• Extensive working knowledge of software development tools and technologies; specifically, Python, Bash, PowerShell, SQL, and data formats such as XML, JSON, CSV
• Nice to have: CSP security certificate e.g. AWS/GCP/Azure certified security speciality,