{"id":4062814,"url":"https://alion.io/job/7elevengsc-cloud-security-operations-engineer","title":"Cloud Security Operations Engineer","company":{"id":1047705,"name":"7Elevengsc","domain":"7-elevengsc.com","url":"https://alion.io/company/7elevengsc","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Orca Security","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Wiz","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"CloudFormation","optional":true},{"name":"Docker","optional":true},{"name":"Incident Management","optional":true},{"name":"ISO 27001","optional":true},{"name":"Least Privilege","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-11-11T09:35:00Z","employer_posted_date":null,"last_verified_at":"2026-11-11T09:35:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Experience in cloud security operations, vulnerability management, and cloud security posture management.\n\nThe candidate will be responsible for operating and managing enterprise Cloud-Native Application Protection Platform (CNAPP) solutions such as Orca Security, Wiz, or Prisma Cloud to continuously monitor, assess, and improve the organization's security posture across multi-cloud environments, including AWS, Microsoft Azure, GCP, and OCI.\n\nThe role involves identifying and investigating cloud security risks, misconfigurations, vulnerabilities, excessive permissions, publicly exposed resources, insecure configurations, attack paths, and potential threats to cloud workloads. The candidate will work closely with Cloud Engineering, DevOps, Infrastructure, IAM, Security Architecture, and SOC teams to prioritize risks, coordinate remediation, validate security controls, and ensure compliance with enterprise cloud security policies and standards.\n\nThe ideal candidate should have strong hands-on experience with CNAPP platforms, a good understanding of cloud infrastructure and security technologies, and the ability to translate security findings into actionable remediation activities.\n\nResponsibilities:\nCNAPP Platform Operations: Operate and administer CNAPP solutions such as Orca Security, Wiz, or Prisma Cloud. Manage cloud integrations, asset discovery, workload visibility, security policies, platform health, and monitoring coverage across multi-cloud environments.\nCloud Security Posture Management (CSPM): Continuously monitor cloud environments for security misconfigurations, policy violations, public exposure, insecure storage, weak encryption, excessive permissions, and deviations from approved security baselines.\nCloud Vulnerability Management: Identify, analyze, prioritize, and track vulnerabilities across cloud workloads, virtual machines, containers, operating systems, and cloud-native services. Coordinate patching and remediation with relevant engineering teams and validate closure.\nAttack Path and Exposure Management: Analyze CNAPP attack paths to identify combinations of vulnerabilities, excessive permissions, public exposure, and sensitive data access that could lead to privilege escalation, lateral movement, or data exfiltration.\nCloud Detection and Response (CDR): Monitor and investigate cloud security events involving suspicious activities, anomalous access, unauthorized API calls, privilege escalation, unusual network connections, and potential workload compromise. Perform triage, identify false positives and duplicate events, and escalate genuine threats to SOC/Incident Response teams.\nCloud IAM Security Monitoring: Identify excessive permissions, overprivileged IAM roles, unused permissions, risky service accounts, inactive access keys, insecure trust relationships, and privilege escalation risks across AWS IAM, Azure RBAC, GCP IAM, and OCI IAM.\nCloud Infrastructure Security: Monitor and assess security configurations across cloud compute, storage, databases, networking, containers, Kubernetes, and serverless workloads. Identify configuration weaknesses and coordinate remediation.\nSecurity Hardening and Patch Management: Monitor compliance with OS hardening requirements, secure configuration baselines, vulnerability remediation, and patch management requirements across Windows and Linux workloads.\nCloud Network Security: Identify network security risks involving publicly exposed resources, unrestricted security groups, firewall misconfigurations, insecure ingress/egress rules, inadequate network segmentation, and exposed management interfaces.\nCloud Security Governance: Monitor compliance with enterprise cloud security policies, technical standards, configuration baselines, and operational security controls. Track exceptions, remediation activities, and control implementation evidence.\nSecurity Incident Investigation: Support cloud security incident investigations through collection and preservation of cloud audit logs, CNAPP events, workload metadata, configuration snapshots, and other relevant evidence. Assist with root cause analysis and remediation.\nSIEM and Security Monitoring Integration: Support integration of CNAPP events and cloud security logs with enterprise SIEM platforms such as Splunk or Microsoft Sentinel. Correlate security events and improve detection and investigation capabilities.\nOperational Reporting: Develop and maintain dashboards and reports covering cloud asset inventory, CNAPP integration coverage, security posture, critical vulnerabilities, CDR events, attack paths, remediation SLAs, and security control effectiveness.\nCloud Security Operations Improvement: Identify recurring security issues, recommend automation opportunities, improve quality, reduce false positives, and strengthen cloud security monitoring and remediation processes.\nVendor and Stakeholder Coordination: Work with CNAPP vendors and internal Cloud Engineering, DevOps, Infrastructure, IAM, SOC, and Security Architecture teams to investigate issues, resolve findings, and improve cloud security posture.\n\nCNAPP / Cloud Security Platforms:\nHands-on experience with at least one enterprise CNAPP platform: Orca Security, Wiz, or Prisma Cloud.\nUnderstanding of CSPM, Cloud Workload Protection (CWPP), Cloud Infrastructure Entitlement Management (CIEM), Cloud Detection and Response (CDR), and attack path analysis.\nExperience with cloud asset discovery, vulnerability assessment, security policy configuration, finding triage, and remediation tracking.\nUnderstanding of CNAPP integration coverage, workload visibility, platform health, and operational reporting.\n\nCloud Platforms:\nGood understanding of AWS, Microsoft Azure, and GCP; exposure to Oracle Cloud Infrastructure (OCI) is desirable.\nKnowledge of cloud accounts, subscriptions, projects, resource hierarchies, and shared responsibility models.\nUnderstanding of cloud-native security services, IAM, networking, compute, storage, and logging.\n\nCloud Infrastructure and Workload Security:\nKnowledge of Windows and Linux operating systems, virtual machines, storage, databases, and serverless services.\nUnderstanding of Docker, container security, and Kubernetes security fundamentals.\nKnowledge of OS hardening, patch management, vulnerability remediation, and secure configuration baselines.\nUnderstanding of Terraform, CloudFormation, or other Infrastructure as Code (IaC) technologies is desirable.\n\nCloud Networking and IAM Security:\nUnderstanding of VPC/VNet, subnets, routing, security groups, network ACLs, firewalls, VPNs, private endpoints, and network segmentation.\nKnowledge of AWS IAM, Azure RBAC, GCP IAM, service accounts, workload identities, privileged access, and least-privilege principles.\nAbility to identify excessive permissions, risky access configurations, and cloud identity-related security risks.\n\nSecurity Monitoring and Incident Response:\nKnowledge of cloud audit logs, security telemetry, triage, incident investigation, and escalation procedures.\nFamiliarity with SIEM solutions such as Splunk or Microsoft Sentinel.\nUnderstanding of cloud threat detection, vulnerability management, incident response, and root cause analysis.\nKnowledge of digital evidence collection and preservation is desirable.\n\nSecurity Governance and Standards:\nUnderstanding of cloud security policies, technical baselines, configuration standards, and operational controls.\nFamiliarity with CIS Benchmarks, NIST security frameworks, ISO 27001, and cloud provider security best practices.\nKnowledge of security risk assessment, remediation SLAs, exceptions, and risk acceptance processes.\n\nSoft Skills:\nStrong analytical, troubleshooting, and problem-solving skills.\nAbility to investigate complex cloud security findings and distinguish genuine risks from false positives.\nStrong collaboration skills to work with Cloud Engineering, DevOps, Infrastructure, IAM, SOC, and Security Architecture teams.\nAbility to communicate technical security risks and remediation recommendations clearly.\nStrong ownership and accountability for tracking security findings through remediation and closure.\nAbility to prioritize activities based on risk severity, business impact, workload criticality, and exposure.\nGood documentation, reporting, and presentation skills.\nAbility to work independently and manage multiple security operations activities.\nWillingness to continuously learn and adapt to evolving cloud technologies, security threats, and CNAPP capabilities.\n\nEducation & Experience:\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.\n5-7 years of experience in Information Security, Cloud Security Operations, Infrastructure Security, Vulnerability Management, or related cybersecurity domains.\nDemonstrable hands-on experience operating at least one CNAPP platform, preferably Orca Security, Wiz, or Prisma Cloud.\nPractical experience monitoring cloud environments, investigating security findings, identifying vulnerabilities, and coordinating remediation.\nExperience working with AWS, Azure, or GCP cloud environments.\nExperience collaborating with Cloud Engineering, DevOps, Infrastructure, IAM, and SOC teams.\nFamiliarity with enterprise security monitoring, incident management, and cloud security governance.\nSkills\nAWS, Azure, CDR, CIEM, CNAPP, CSPM, CWPP, GCP, ORCA, Prisma Cloud, Wiz","description_format":"text","description_chars":9400,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Retail & Shop Systems","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-11T09:35:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T11:32:36Z"},"pay":null,"html_url":"https://alion.io/job/7elevengsc-cloud-security-operations-engineer","json_url":"https://alion.io/job/7elevengsc-cloud-security-operations-engineer.json","meta":{"generated_at":"2026-11-11T11:32:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20214,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1047705},"rest":"https://alion.io/mcp/rest/get_company?id=1047705"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2F7elevengsc-cloud-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2F7elevengsc-cloud-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2F7elevengsc-cloud-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/7elevengsc-cloud-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2F7elevengsc-cloud-security-operations-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4062814}},{"tool":"search_jobs","arguments":{"company":"7-elevengsc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4062814},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}