Cyber Security Consultant - CSRO

Position: Senior Systems Engineer
Experience: 8+ Years
Category: IT Infrastructure
Main location: Bangalore/Chennai
Position ID: J0726-2590
Employment Type: Full Time

Job Summary
We are seeking a Cloud Security Engineer with a strong focus on AWS security governance and guardrails enforcement. This role emphasizes policy driven security, risk identification, and automated enforcement across complex enterprise environments using policy as code and IaC frameworks.

Key Responsibilities
. Design and enforce AWS security guardrails using SCPs, IAM policies, AWS Config, and Security Hub
. Implement preventive and detective controls aligned with enterprise security standards
. Enforce Zero Trust and least privilege principles across cloud workloads
. Perform continuous risk assessments to identify misconfigurations, access risks, and security gaps, and drive remediation
. Develop and manage security policies as code using JSON/YAML based frameworks
. Enforce controls consistently through AWS policies, Config rules, Terraform modules, and ARM templates
. Maintain version controlled, reusable policy frameworks for scalable governance
. Enable continuous compliance monitoring, drift detection, and automated remediation
. Utilize Cortex (Prisma Cloud) / Wiz for cloud security posture management, threat detection, and risk prioritization
. Translate risk findings into actionable guardrails and enforceable controls
. Improve overall security coverage across cloud assets using a risk based approach
. Build secure by default Terraform modules for AWS environments
. Use Python and scripting to automate security enforcement, compliance validation, and remediation workflows
. Integrate security into CI/CD pipelines (GitHub Actions) to enable shift left enforcement
. Drive an automation first approach to support agile, consistent security enforcement at enterprise scale
. Support governance in Azure using Azure Policies and ARM templates as needed

Skills Required:

Strong AWS security expertise (IAM, SCPs, Config, Security Hub).Experience with policy as code and automated security enforcement.Hands on with Terraform, ARM templates, and JSON based policies.Familiarity with Cortex / Wiz (CNAPP tools).Proficiency in Python / scripting and CI/CD (GitHub Actions).Solid understanding of risk assessment, Zero Trust, and compliance frameworks.
Nice to Have
Azure security exposureAWS Security Specialty certification
This keeps it tight, security led, and enterprise focused, while clearly emphasizing: Guardrails & enforcement Policy as code (JSON/Terraform/ARM) CNAPP (Cortex/Wiz) + risk based approach Automation for large scale environments

Preferred Qualifications:
We are looking for a Cloud Security Engineer with strong development and automation skills. The ideal candidate should have:
. Hands on experience with Azure and AWS services to perform risk assessments and implement security guardrails.
. Ability to develop and enforce security policies using CSPM/CNAPP
. Strong Infrastructure as Code skills with Terraform and ARM templates for secure deployments.
. Proficiency in PowerShell scripting
. Knowledge of Zero Trust principles, least privilege access, and integration of security controls into CI/CD pipelines.

#LI-SB2