Technical Consultant - Cloud Security

Title Technical Consultant - Clous Security

Department Enterprise Engineering

Location Bangaluru

Reports To Lead - Cloud Platform Security Architect

Level 5

Job Type Permanent

Enterprise Platform Engineering is responsible to provide different internal developer platforms that are required to build and operate technology solutions that support our business. The teams mission is to create a frictionless developer experience throughout all stages of software development through to deployments and beyond. This will be a combination of engineering the required standards, policies, configurations into platform components but also to provide the right processes, engagement model, adoption guidance and expertise to enable teams to leverage the platforms Golden Paths effectively.

Technical Consultant - Cybersecurity Cloud works within the Platform Security team in Enterprise Engineering and supports the secure adoption and operation of cloud platforms across Fidelity International. The analyst will work closely with senior architects and cloud platform teams to assess, review, and strengthen security controls for cloud workloads, while building deeper expertise in secure cloud design, governance, and compliance. This role is designed as a development pathway into architecture roles within Cyber Information security domain.

The analyst will contribute to security assessments, policy implementation, design reviews, and CI/CD security integration, helping ensure that cloud platforms are used in a secure, compliant, and scalable manner aligned to Fidelitys Cloud First strategy.

• Support the review of cloud workload designs to ensure alignment with enterprise security standards.
• Participate in solution design discussions with product delivery and cloud operations teams.
• Contribute to threat modelling exercises and risk assessments for cloud services.
• Assist in identifying security gaps and recommending remediation actions.

• Support the enforcement of enterprise cloud security policies and blueprints.
• Assist in maintaining and updating security design patterns and reusable controls.
• Contribute to documentation of cloud security artefacts and reference architectures.
• Support audit preparation and evidence gathering related to cloud security controls.

• Help embed security checks within CI/CD pipelines (SAST, DAST, dependency scanning, container scanning).
• Support integration of policy-as-code tools (e.g., Sentinel, OPA, Terraform security policies).
• Contribute to software supply chain security controls.

• Assist in monitoring security posture using tools such as CSPM (e.g., InsightCloudSec).
• Support review and remediation of cloud misconfigurations and vulnerabilities.
• Help track remediation progress and produce security reporting dashboards.

• Work closely with Cloud Operations, Platform Engineering, and Product Delivery teams.
• Participate in architecture forums and cross-team discussions.
• Support senior architects in stakeholder engagements and design workshops.

• 810 years of experience in cybersecurity, cloud engineering, or DevSecOps roles.
• Hands-on experience with at least one major public cloud platform (AWS, Azure, or GCP).
• Practical exposure to: IAM concepts, Network security controls, Encryption at rest and in transit
• Cloud logging and monitoring
• Basic understanding of CI/CD security integration.
• Familiarity with container security and Kubernetes fundamentals.
• Strong analytical and problem-solving skills.
• Ability to communicate clearly with both technical and non-technical stakeholders.
• Experience with infrastructure-as-code (Terraform, ARM, CloudFormation).
• Familiarity with OWASP Top 10 vulnerabilities.
• Exposure to security frameworks such as NIST 800-53, ISO27001, CSA.
• Understanding of GDPR, FCA, or financial services regulatory environments.
• Exposure to CSPM tools or cloud security posture assessments.

• Undergraduate degree in a relevant technology field or significant relevant experience is required.
• Security accreditations such as CISM, CISSP or CISA by a recognised body are desirable but not required.
• AWS/Azure Associate level certifications
• Cloud security certifications such as CCSK or other relevant and recognised qualification are desirable.
• Certifications in major public cloud platform security and architecture practices are desirable.