Cloud Security Posture Management Lead Engineer

Job Summary

Job Family: IT Cyber Security (India)

Travel Required: None

Clearance Required: None

The Cloud Security Posture Management (CSPM) Lead is responsible for strengthening the security posture of the organization s cloud environments across Microsoft Azure and Amazon Web Services (AWS). This role leads the implementation, optimization, and operationalization of CSPM capabilities using Wiz and related cloud security technologies, translating cloud security findings into prioritized, measurable risk reduction.

Responsibilities

• Lead CSPM operations across Azure and AWS, including security posture, configuration, identity, vulnerability, and exposure management.
• Establish and maintain secure cloud configurations aligned to CIS, NIST, ISO 27001, and organizational security standards.
• Identify, prioritize, and drive remediation of cloud misconfigurations, vulnerabilities, excessive permissions, exposed services, and toxic-risk combinations.
• Partner with Cloud Engineering, DevOps, Application Security, Infrastructure, IAM, SOC, Vulnerability Management, and GRC teams to remediate security risks.
• Establish policies and automation to reduce manual remediation, improve response times, and eliminate recurring cloud security issues.
• Integrate Wiz findings with SIEM/SOC, vulnerability management, ticketing, and incident response processes.
• Support cloud security architecture reviews, threat modeling, incident response, data protection, and investigations involving AWS and Azure.
• Develop metrics and executive reporting demonstrating cloud risk, remediation trends, control effectiveness, and security posture improvement.
• Mentor engineers and analysts and establish repeatable cloud security engineering practices.

Requirements

Core Technical Skills: Required

• Microsoft Azure security and architecture
• AWS security and architecture
• Cloud vulnerability and exposure management
• Cloud logging and monitoring
• Security configuration and compliance
• Automation and remediation
• Cloud security architecture

Preferred Qualifications

Core Technical Skills: Preferred

Wiz / cnapp / CSPM

• Cloud IAM and least privilege
• Infrastructure as Code security (Terraform/CloudFormation)
• CI/CD and DevSecOps
• Container/Kubernetes security
• MITRE ATT&CK and cloud threat modeling
• Python, PowerShell, or similar automation
• CIS Benchmarks, NIST CSF, and ISO 27001

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.