Cluster Manager /Senior Cluster Manager - Information Security

Information security team member who is proficient in maintaining managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.

• A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert risks.
• Security Posture Monitoring: Implement and manage SIEM CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint).
• Continuously assess cloud configurations for security risks and compliance violations.
• Monitor for drift from secure baselines and enforce remediation workflows.
• Risk Identification Remediation: Detect misconfigurations, excessive permissions, and insecure storage or networking setups.
• Collaborate with cloud engineering and DevOps teams to remediate findings.
• Prioritize risks based on impact and likelihood.
• Incident Response Forensics: Investigate alerts and anomalies flagged by CSPM tools.
• Support cloud incident response and post-mortem analysis.
• Maintain logs and evidence for forensic investigations.
• Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
• Additional Accountabilities pertaining to the role: Manage maintain security tool Microsoft Sentinel Palo Alto Prisma.
• Maintain compliance as per organization compliance policy.
• Highlight risk mitigation plan.
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Risk analysis and mitigation.
• Vendor Co-ordination.
• Strong troubleshooting, analytical, and communication skills.
• Energetic, self-motivated and self-sufficient in accomplishing tasks.
• Good analytical and problem solving skills.

• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take required steps.
• Discuss observation response as applicable and improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes. Potential regulatory actions due to non-compliances.

• Handling of fast changing environment with variety of cloud service providers.
• Handling of compliance expectations in stringent timelines.
• Handling multiple stakeholders at a time.
• Coordination with third party consultants who assist in auditing and compliance initiatives.

• a) Qualifications: Minimum 3+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
• Minimum 3+ years in Information / Cyber / application security.
• b) Work Experience:
  • Knowledge hands-on experience on CSPM CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
  • Experience in Project management.
  • Positive attitude, Hard Worker and team player
  • Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage