Cloud/App Security Specialist

Experience: 6+ Years | Location: Bangalore, India

Role Summary

We are seeking an experienced Cloud Security Engineer to drive (Hands-On) cloud and infrastructure security. The role focuses on cloud security, CNAPP tools, EDR solutions, cloud posture management, patching, IaC security, and SIEM/SOC collaboration. You will secure enterprise workloads, implement automated compliance controls, and coordinate with SOC and DevOps teams while communicating risks and remediation clearly to stakeholders.

Key Responsibilities

Cloud & Infrastructure Security

• OWASP-DT Platform Administration.

• Amazon GuardDuty, AWS Inspector, IaC with Terraform, SSM Agent, SSM Document, Good knowledge in AWS Infrastructure, Linux, Ec2, Lambda Function.

• Harden Linux/Windows workloads using CIS Benchmarks/STIGs.

• Implement least privilege access and manage secrets securely.

CNAPP & Cloud Posture Management

• Continuously monitor cloud workloads using CNAPP platforms

• Assess and remediate misconfigurations and drift against CIS/NIST/internal standards.

• EDR & Threat Detection

• Deploy and manage EDR solutions

• Integrate endpoint and cloud logs into SIEM

• Participate in SOC operations, incident response, and threat hunting.

Patch Management & Vulnerability Remediation

• Lead automated patching workflows for servers, containers, and cloud services.

• Conduct vulnerability scanning and remediation

• Automate security operations to reduce manual toil.

Compliance & Governance

• Maintain compliance with ISO 27001, NIST, CIS, GDPR, HIPAA.

• Generate audit reports, track remediation actions, and conduct risk assessments.

Communication & Collaboration

• Act as a security liaison between DevOps, SOC, and business teams.

• Communicate risks, remediation plans, and posture findings to technical and non-technical stakeholders.

• Promote security best practices across teams.

Required Skills & Expertise (Must have)

• OWASP-DT Tool Platform Administration (MUST HAVE)

• Cloud Security & CNAPP: AWS, GCP

• EDR & Endpoint Security

• Cloud Posture Management & IaC Security: Terraform, CloudFormation

• Patch & Vulnerability Management: Automated patching in AWS/GCP

• Threat Detection & SOC/SIEM: CloudWatch, Trend Micro Vision One, Cloudtrail

• Linux & Windows Security: OS hardening, permissions, network security

• Scripting & Automation: Python, Bash,

• Compliance & Governance: ISO 27001, NIST, CIS, GDPR, HIPAA

• Soft Skills: Strong communication, documentation, cross-team collaboration