Context - Cloud Native Infrastructure Security for Compliance and Enforcement(Azure Services)

We are seeking a highly skilled and motivated Cloud Security Engineer with a strong background in security research, operations, and assurance, along with cloud architecture expertise. The role involves implementing security controls, conducting in-depth assessments of cloud services, and identifying secure configurations and misconfigurations across enterprise cloud environments.

You will work closely with development, DevOps, and security teams to ensure that cloud infrastructure meets industry and organizational security standards.

Key Responsibilities:

Implement cloud-native and third-party security controls across AWS, Azure, and/or GCP environments.
Conduct detailed security assessments of cloud services (IaaS, PaaS, SaaS) to ensure compliance with internal policies and industry frameworks.
Identify and remediate secure misconfigurations and vulnerabilities using automated scanning and manual inspection techniques.
Collaborate with cloud architects and security engineers to design and recommend secure infrastructure patterns.
Stay updated with evolving cloud threats and vulnerabilities, and contribute to threat modeling and risk assessments.
Develop scripts and tools to automate security monitoring and compliance validation.
Document findings, remediation guidance, and contribute to security standards development.

Required Skill Set:

Technical Expertise:

Strong knowledge of cloud platforms: AWS, Azure, or GCP
Hands-on experience with CSPM (Cloud Security Posture Management) tools and cloud-native security services
Deep understanding of IAM, encryption, network security, and data protection within cloud environments
Experience with CI/CD security integration and DevSecOps practices
Familiarity with security standards such as CIS Benchmarks, NIST, and ISO 27001

Security Domains:

Security Research: Ability to evaluate and analyze security trends, tools, and techniques
Security Operations: Incident detection, log analysis, SIEM tools, and response processes
Security Assurance: Risk assessments, compliance audits, and policy enforcement
Cloud Architecture: Knowledge of secure cloud design patterns and service integrations

Tools & Languages:

Tools: Prisma Cloud, Wiz, AWS Security Hub, Azure Defender, GCP Security Command Center
Scripting: Python

Cloud Security Architect