Senior Security Specialist - Cloud Operations

Core Responsibilities (Hands-on Focus):

• Implement and manage security controls across Public Cloud (AWS, Azure) and Private Cloud (VMware), including log forwarding to SIEM, access control (RBAC, least privilege), and IAM integration.
• Deploy, configure, and maintain security solutions such as CSPM, WAF, SIEM, EDR, PAM, and encryption frameworks.
• Ensure effective enforcement of security policies through regular reviews and continuous improvement.
• Conduct cloud architecture security assessments and implement security enhancements.
• Perform product security testing including SAST, DAST, SCA, threat modeling, and penetration testing coordination (3rd party PT).
• Operate SOC functions and lead Incident Response (IR) activities, including triage, containment, remediation, and root cause analysis (RCA).
• Implement and enforce GRC controls aligned with ISO 27001, ITGC, ABAC, focusing on hands-on execution beyond documentation.
• Manage the end-to-end vulnerability management lifecycle, including identification, prioritization, remediation, validation, with coverage of OWASP Top 10 risks.

Skill Set:

• 6-9 years of hands-on experience in cloud security and security engineering roles.
• Strong experience in deployment, configuration, and operations of security tools and platform.
• Strong proficiency in Linux server administration.
• Hands-on experience working in multi-cloud environments (AWS, Azure).
• Strong background in vulnerability management and incident response.
• Experience working with SOC teams and production security incidents.
• Demonstrated ability to implement DevSecOps and secure CI/CD pipelines.
• System Administration: Strong Linux administration skills.
• Knowledge of networking, storage, and system monitoring.

Monitoring & Logging:

• Familiarity with tools like Prometheus, Grafana, ELK/EFK stack.

Automation & Scripting:

• Proficiency in Bash scripting.
• Basic Python scripting.
• Automating operational tasks.

Good to Have Skills:

• Cloud platforms: AWS, Azure, or GCP.
• Infrastructure as Code: Terraform.

Educational Qualification:

BE / B.Tech., M.E./M.Tech., or M.Sc / MCA

Skills

AWS, Azure, CSPM, Cloud Security, EDR, PAM, SIEM, VMware, WAF