{"id":2931440,"url":"https://alion.io/job/zee-entertainment-enterprises-information-security-analyst-cloud-security","title":"Information Security Analyst - Cloud Security","company":{"id":1906943,"name":"Zee Entertainment Enterprises","domain":"zee.com","url":"https://alion.io/company/zee-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":36000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Apache HTTP Server","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Configuration Management","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"Google GKE","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Packer","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false},{"name":"Akamai","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-20T14:35:45Z","employer_posted_date":null,"last_verified_at":"2026-10-20T14:35:45Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"We are seeking a hands-on Information Security Analyst - Cloud and Infrastructure Security to support the security, hardening, monitoring, and continuous improvement of enterprise cloud and infrastructure environments.\n\nThe role will focus on cloud security, infrastructure security, endpoint and workload protection, network security, security monitoring, incident investigation, system hardening, and security automation across enterprise environments.\n\nThe successful candidate will work closely with Cloud Infrastructure, Network, Platform Engineering, Security Operations, and IT Infrastructure teams to identify security risks, investigate security events, implement security controls, harden infrastructure, and improve the organization's overall security posture.\nThis is a technical Individual Contributor role for a security professional who enjoys building, securing, troubleshooting, monitoring, and hardening complex infrastructure environments at scale.\n\nThe candidate will have responsibilities across the following functions: \n\nCloud Security\nImplement and maintain security controls across GCP cloud environments.\nPerform cloud security assessments and identify misconfigurations, Excessive IAM permissions, publicly exposed services, Insecure network configurations, and weak security controls.\nSupport implementation of cloud security baselines and guardrails.\nMonitor and improve cloud security posture using native and third-party security platforms.\nPerform security reviews of cloud infrastructure, services, and workloads.\nSupport remediation and closure of cloud security findings.\n\nGCP Security: \nHands-on experience with:\nGoogle Cloud IAM\nSecurity Command Centre (SCC)\nCloud Armor\nCloud KMS\nCloud Logging\nCloud Monitoring\nVPC\nFirewall Rules\nLoad Balancers\nCloud Run\nGKE\nArtifact Registry\nService Accounts\nWorkload Identity\nVPC Service Controls\nResponsibilities include reviewing access controls, network exposure, service configurations, logging, encryption, and security posture of GCP workloads.\n\nKubernetes / GKE Security: \nPerform security assessments and hardening of Kubernetes and GKE environments.\nReview Kubernetes configurations, workloads, namespaces, RBAC and service accounts.\nImplement and maintain:\nRBAC\nNetwork Policies\nPod Security controls\nAdmission Controllers\nOPA Gatekeeper\nKyverno\nIdentify insecure Kubernetes configurations and recommend remediation.\nSupport container and workload security.\nReview exposed services, ingress configurations, secrets, privileges, and workload permissions.\nTroubleshoot Kubernetes security and infrastructure-related issues.\n\nXDR / Endpoint and Workload Security: \nMonitor and investigate security events using XDR/EDR platforms such as CrowdStrike Falcon/XDR.\nInvestigate suspicious:\nProcesses\nNetwork connections\nAuthentication activity\nEndpoint behavior\nPrivilege escalation\nMalware indicators\nPersistence mechanisms\nPerform endpoint and workload investigations.\nSupport threat hunting and incident investigation.\nAnalyse endpoint telemetry and correlate events across cloud, infrastructure, and network environments.\nAssist with containment, remediation, and recovery activities during security incidents.\nDevelop and tune detection rules and security monitoring use cases.\n\nSIEM and Security Monitoring: \nMonitor security events through Chronicle SIEM and other security monitoring platforms.\nInvestigate alerts and determine whether activity represents legitimate behaviour, misconfiguration, or a security incident.\nPerform log analysis and event correlation across:\nCloud infrastructure\nEndpoints\nNetwork devices\nKubernetes\nIdentity systems\nApplications\nSupport development and tuning of security detection use cases.\nPerform basic threat hunting based on indicators of compromise, attacker behaviour, and anomalous activity.\nMaintain investigation documentation and incident timelines.\n\nNetwork Security and Troubleshooting: \nSupport security and troubleshooting activities across enterprise network infrastructure.\nInvestigate connectivity, routing, DNS, firewall, VPN, proxy, and TLS/SSL-related issues.\nTroubleshoot network communication between:\nCloud workloads\nKubernetes clusters\nServers\nApplications\nEndpoints\nExternal services\nAnalyse network traffic and identify abnormal or suspicious communication.\nReview firewall rules, network segmentation, security groups, routes, and exposed services.\nSupport secure network architecture and segmentation.\nTroubleshoot connectivity issues involving VPC, VPN, firewalls, load balancers, proxies, and private connectivity.\nUse tools such as:\nWireshark\ntcpdump\nNmap\ncurl\nnetstat / ss\ntraceroute\nnslookup / dig\ntelnet / nc\nOpenSSL\nTLS diagnostic tools\n\nSecure Remote Access and File Transfer Security: \nManage and secure enterprise remote-access solutions such as Apache Guacamole.\nImplement secure authentication, authorisation, session controls, and access policies for remote infrastructure access.\nMonitor remote access activity and investigate suspicious sessions.\nSupport secure file-transfer infrastructure such as SFTPGo.\nConfigure and review:\nUser access\nAuthentication\nSSH keys\nPermissions\nIP restrictions\nEncryption\nFile-transfer activity\nInvestigate unauthorised or suspicious remote access and file-transfer activity.\nEnsure remote-access and file-transfer platforms follow enterprise security standards.\n\nInfrastructure Hardening: \nPerform security hardening of Linux and Windows infrastructure.\nImplement and validate CIS Benchmark security controls.\nIdentify insecure configurations and provide remediation recommendations.\nHarden:\nOperating systems\nServers\nVirtual machines\nContainers\nKubernetes nodes\nNetwork services\nRemote-access systems\nReview unnecessary services, ports, packages, protocols, accounts, and privileges.\nSupport vulnerability remediation and configuration management.\nConduct periodic security baseline assessments.\n\nGolden Image Management: \nDesign, maintain, and validate secure Golden Images for enterprise workloads.\nHarden operating system images according to organisational security standards and CIS benchmarks.\nEnsure Golden Images include:\nSecure OS configurations\nRequired security agents\nLogging and monitoring\nEndpoint protection\nVulnerability management agents\nSecure authentication\nRequired security policies\nPerform security validation before images are released for enterprise use.\nMaintain version-controlled image baselines and security configurations.\nPeriodically review and update images based on new vulnerabilities, security requirements, and OS updates.\nSupport automated image creation and validation using tools such as Packer and Ansible.\n\nVulnerability and Security Assessment: \nPerform infrastructure and cloud vulnerability assessments.\nAnalyse findings from vulnerability scanners, CSPM/CNAPP, XDR, and security platforms.\nIdentify:\nCritical vulnerabilities\nOS vulnerabilities\nMisconfigurations\nExposed services\nWeak protocols\nWeak cryptographic configurations\nUnsupported software\nPrioritise findings based on severity, exploitability, exposure, and business impact.\nWork with infrastructure teams to drive remediation.\nValidate security fixes and configuration changes.\nTrack remediation progress and security posture improvements.\n\nThreat Hunting and Incident Response/l\nParticipate in security incident investigations across cloud, infrastructure, endpoint, and network environments.\nPerform threat hunting using:\nXDR telemetry\nSIEM logs\nCloud logs\nNetwork telemetry\nAuthentication events\nInvestigate indicators of compromise and suspicious activity.\nIdentify attacker techniques, persistence mechanisms, lateral movement, and privilege escalation.\nSupport incident containment, eradication, and recovery.\nPerform root-cause analysis and recommend preventive controls.\nDocument incidents, findings, and remediation actions.\n\nIdentity and Access Security: \nReview and monitor identity and access controls across cloud and infrastructure environments.\nApply least privilege principles.\nReview:\nIAM roles\nService accounts\nPrivileged accounts\nSSH access\nRemote-access permissions\nAdministrative access\nIdentify excessive privileges and unauthorised access.\nSupport Zero Trust and identity-centric security controls.\nInvestigate suspicious authentication and privilege-related events.\n\nSecurity Automation and Scripting: \nAutomate repetitive security and infrastructure tasks.\nDevelop scripts for:\nSecurity assessments\nConfiguration validation\nLog analysis\nVulnerability reporting\nHardening validation\nSecurity monitoring\nExperience with one or more:\nPython\nBash\nPowerShell\nGo\nAutomate security checks and operational workflows where appropriate.\n\nThe core requirements for the job include the following:\n\nCloud Security: \nStrong hands-on knowledge of GCP Security.\nUnderstanding of AWS and Azure security fundamentals.\nExperience with:\nIAM\nSCC\nCloud Armor\nKMS\nVPC\nFirewall\nLogging and Monitoring\nGKE\nCloud Run\nLoad Balancers\nService Accounts\n\nInfrastructure Security: \nStrong understanding of Linux and/or Windows security.\nExperience with server hardening and vulnerability remediation.\nKnowledge of CIS Benchmarks.\nExperience with Golden Images and infrastructure baseline management.\nKnowledge of Packer, Ansible, or equivalent tools is preferred.\n\nNetwork Security: \nStrong networking fundamentals.\nUnderstanding of TCP/IP, DNS, HTTP/HTTPS, TLS, routing, VPNs, firewalls, proxies, and network segmentation.\nAbility to troubleshoot complex network connectivity and security issues.\nExperience with network troubleshooting tools.\n\nXDR / SIEM: \nExperience with CrowdStrike Falcon/XDR or equivalent XDR/EDR platform.\nExperience with Chronicle SIEM or equivalent SIEM platform.\nUnderstanding of security monitoring, alert investigation, threat hunting, and incident response.\n\nRemote Access and File Transfer: \nExperience securing remote-access technologies such as Apache Guacamole.\nExperience with secure file-transfer platforms such as SFTPGo or equivalent SFTP solutions.\nUnderstanding of SSH, certificates, keys, authentication, authorisation, and secure file transfer.\n\nKubernetes Security: \nHands-on experience with Kubernetes / GKE security.\nKnowledge of:\nRBAC\nNetwork Policies\nPod Security\nAdmission Controllers\nOPA Gatekeeper\nKyverno\nContainer security\n\nSecurity Engineering: \nVulnerability assessment and remediation.\nThreat modelling and security assessments.\nIncident investigation.\nThreat hunting.\nSecurity monitoring.\nInfrastructure hardening.\nSecurity automation.\n\nGood to Have: \nExperience with Zscaler ZPA / ZIA.\nExperience with Akamai WAF or other enterprise WAF technologies.\nExperience with OpenSCAP.\nExperience with Packer and Ansible.\nKnowledge of cloud-native workload protection.\nExperience with CSPM/CNAPP platforms.\nKnowledge of Zero Trust Architecture.\nExperience with network packet analysis.\nKnowledge of security architecture and infrastructure design.\nExperience with security policy enforcement and compliance frameworks.\nGood-to-have certifications such as:\nGoogle Professional Cloud Security Engineer\nCKA / CKS / KCNA\nSecurity+\nCCSP\nCISSP\nGIAC certifications\n\nExperience: \n3-6 years of experience in Information Security, Cloud Security, Infrastructure Security, Security Operations, Network Security, or a related domain.\nCandidates should demonstrate practical experience in several of the following areas:\nGCP Security\nCloud Infrastructure Security\nKubernetes / GKE Security\nXDR / EDR\nSIEM\nNetwork Security\nInfrastructure Hardening\nGolden Image Management\nVulnerability Management\nThreat Hunting\nIncident Response\nRemote Access Security\nSecure File Transfer\nSecurity Automation\nSkills\nCrowdStrike, EDR, Falcon, GCP, GKE, Google Cloud, Kubernetes, XDR","description_format":"text","description_chars":11691,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Broadcasting","Streaming & OTT Platforms"],"lifecycle":[{"event":"open","at":"2026-10-20T14:35:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":23,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/zee-entertainment-enterprises-information-security-analyst-cloud-security","json_url":"https://alion.io/job/zee-entertainment-enterprises-information-security-analyst-cloud-security.json","meta":{"generated_at":"2026-10-22T23:14:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8854,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1906943},"rest":"https://alion.io/mcp/rest/get_company?id=1906943"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzee-entertainment-enterprises-information-security-analyst-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzee-entertainment-enterprises-information-security-analyst-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzee-entertainment-enterprises-information-security-analyst-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zee-entertainment-enterprises-information-security-analyst-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzee-entertainment-enterprises-information-security-analyst-cloud-security"}]}