{"id":2616798,"url":"https://alion.io/job/societe-generale-cyber-security-consultant-csro","title":"Cyber Security Consultant - CSRO","company":{"id":1760180,"name":"Société Générale","domain":"societegenerale.com","url":"https://alion.io/company/societegenerale-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":{"grade":"B","score":80,"open_postings":93,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Fine-tuning","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"Zero Trust","optional":false},{"name":"AWS Bedrock","optional":true},{"name":"OpenAI","optional":true},{"name":"PowerShell","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-19T20:03:52Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Responsibilities\n\n Role Overview\nWe are looking for a Cyber Security Engineer with a strong focus on cloud security assessment, risk analysis, and governance for modern cloud platforms and cloud‑hosted AI‑enabled services.\nThis role is centered on evaluating cloud security posture, defining security guardrails, and providing risk visibility across AWS and Azure environments using enterprise security posture management and threat detection platforms.\nThe position also includes assessing security risks introduced by AI capabilities deployed in the cloud (such as generative AI services and AI‑enabled applications), ensuring they align with established cloud security, data protection, and governance standards.\nKey Responsibilities\nCloud Security Risk Assessment & Governance (Primary Focus)\nPerform security and architectural risk assessments for public cloud platforms (AWS & Azure).\nDefine, apply, and validate security guardrails covering:Identity & access management\nNetwork exposure\nData protection and encryption\nSecrets and key management\nLogging, monitoring, and detection\n\nApply Zero Trust principles, least‑privilege access models, and policy‑based governance during cloud security assessments.\nConduct ongoing cloud risk assessments using CSPM/CNAPP and security analytics tools.\nReview cloud architectures to assess trust boundaries, data flows, identity models, and control effectiveness.\nTranslate technical findings into risk statements, control gaps, and remediation guidance for engineering and governance stakeholders.\nMaintain cloud security risk documentation, control mappings, and management‑level reporting.\nAI‑Enabled Workloads – Security & Risk Awareness (Secondary Focus)\nAssess security risks associated with AI‑enabled applications hosted in the cloud, focusing on:Data exposure and access control\nService misuse or unintended behavior\nIntegration risks with cloud identities, APIs, and storage\n\nPerform targeted risk assessments for AI capabilities such as:Generative AI services (data leakage, prompt misuse, abuse scenarios)\nControls to enforce secure fine-tuning of models with adherence to security framework designed.\nAgent‑based services (scope of tool access, execution privileges, segregation of duties)\n\nEnsure AI‑enabled services adhere to existing cloud security baselines, data governance policies, and risk management frameworks.\nAlign AI‑related findings with frameworks such as the NIST AI Risk Management Framework, positioning them within broader cloud governance processes.\nPolicy, Compliance & Security Posture Management\nBuild, tune, and maintain security policies in CNAPP/CSPM platforms to detect:Misconfigurations\nExcessive permissions\nNetwork and data exposure risks\n\nConfigure cloud threat detection platforms to identify anomalous activity and potential threats across workloads.\nWrite and manage JSON‑based security policies and integrate them into cloud governance workflows.\nPerform recurring security posture and compliance assessments to:Validate alignment with internal cloud security standards\nMeasure control effectiveness and residual risk\n\nGenerate risk posture, compliance status, and executive‑level assessment reports.\nDevSecOps & Cloud Architecture Assurance\nReview Infrastructure as Code (IaC) to identify cloud security and architectural risks prior to deployment.\nEmbed security and compliance checks into CI/CD pipelines following DevSecOps principles.\nValidate that cloud‑hosted AI‑enabled services follow the same secure deployment, access control, and monitoring standards as traditional cloud workloads.\nSkills You’ll Need\nStrong understanding of cloud security controls, risk assessment methodologies, and governance practices.\nHands‑on experience assessing AWS and Azure environments from a security and risk perspective.\nExperience with cloud security posture management (CSPM), CNAPP, and threat detection platforms.\nWorking knowledge of Infrastructure as Code (IaC) and the ability to review it for security impact.\nFamiliarity with DevSecOps, CI/CD pipelines, and cloud security telemetry.\nStrong grounding in Zero Trust architecture, least privilege access, and compliance frameworks.\nWorking awareness of AI security risks, particularly where AI intersects with cloud services (data governance, access control, misuse scenarios).\nAbility to communicate risk clearly to engineers, architects, and governance stakeholders.\nNice to Have\nCloud or security certifications (e.g., Azure, AWS, security governance).\nExperience with container security or distributed cloud systems.\nExposure to AI‑enabled cloud services (e.g., Azure OpenAI, Amazon Bedrock, Microsoft Foundry) from a governance or security posture perspective.\nFamiliarity with NIST AI RMF, ISO/IEC 42001, or responsible AI governance frameworks.\n\n Profile required\n\n We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have:\nHands-on experience with Azure and AWS services to perform risk assessments and implement security guardrails.\n\nAbility to develop and enforce security policies using CSPM/CNAPP\n\nStrong Infrastructure as Code skills with Terraform and ARM templates for secure deployments.\n\nProficiency in PowerShell scripting\n\nKnowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.","description_format":"text","description_chars":5370,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Commercial & Retail Banks","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-15T12:23:34Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.563,"p_room":0.9,"age_days":6,"expected_fill_days":17,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/societe-generale-cyber-security-consultant-csro","json_url":"https://alion.io/job/societe-generale-cyber-security-consultant-csro.json","meta":{"generated_at":"2026-10-19T20:34:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16345,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1760180},"rest":"https://alion.io/mcp/rest/get_company?id=1760180"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsociete-generale-cyber-security-consultant-csro"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsociete-generale-cyber-security-consultant-csro"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsociete-generale-cyber-security-consultant-csro"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/societe-generale-cyber-security-consultant-csro\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsociete-generale-cyber-security-consultant-csro"}]}