Cyber Security Cloud Engineer

1 week ago


Bengaluru, Karnataka, India ERM Full time

Our Cyber Security team is actively enhancing our cloud presence and advancing digital transformation efforts. While many of our services have already transitioned to the cloud, we're continuously migrating from on-premise setups and developing new digital products and services. Embracing DevSecOps practices ensures that this evolution occurs securely. To bolster our Cyber Team's capabilities, we seek an adept Cyber Security Cloud Engineer to join us

Description:

Reporting into the cloud security engineering team, the Cyber Security Cloud Engineer plays a critical role in overseeing and driving a broad range of activities and a trustworthy, confident, and influential character is therefore essential. We have a small security operations team operating globally, and the successful candidate will be expected to have a broad range of experience, be self-motivated and work alongside cloud operations engineers and several globally distributed development teams to ensure that security is implemented correctly and to deliver to our Cyber Security Strategy and roadmap.

This global role is responsible for providing advice and assurance on secure cloud deployments to new and existing environments. Validating that cloud services and applications are designed, developed and implemented to the highest security standards. In addition, the Cyber Security Cloud Engineer will be responsible for the ongoing operational implementation of ERM's cloud security posture management.

The role will deliver and continuously revise our framework and supporting ISMS artefacts including standards, baseline configuration and procedure documentation required to maintain our framework against a changing threat landscape. The role will provide security expertise within working groups and forums in support of governance and compliance activities. The role will assure that all IT solutions and services being delivered are compliant with our ISMS and that all exceptions and risks are documented and managed. The role will be responsible for regularly cloud security assessments against best practice frameworks. The role will also support business growth initiatives and innovations by keeping up to date with new security offerings and enhancements to maintain our risk posture.

The predominant infrastructure within ERM aligns with Azure utilizing the Microsoft stack. However, we concurrently support numerous projects hosted on AWS platforms. It is imperative for us to uphold consistent security measures across all environments. Therefore, proficiency in AWS is considered advantageous, as it facilitates the application of equivalent security controls across our diverse technological landscape Several of the solutions use containers so an understanding of containers and the security implications would be helpful.

About You:

At least 3 years practical hands-on experience managing and implementing Microsoft Azure environments and security tools such as Defender for Cloud, perhaps working purely in an infrastructure capacity or also with development teams to help secure their applications. You will also be able to discuss technical requirements and then turn them into practical applications of security and compliance tooling.

Working knowledge and experience in implementing and maintaining security, industry, and regulatory compliance frameworks and drivers such as Azure Security Benchmark V3, NIST CSF, ISO27001 and CIS v8.

Strong team member engagement skills. Diligent, delivery-focused, and able to manage multiple work streams simultaneously.

Ideally, holds Microsoft Certified: Azure Security Engineer Associate or higher. We would support you in maintaining and working towards these certifications.

Responsibilities

Lead efforts to promote cloud security principles across ERM's technology delivery teams and collaborate with cross-functional teams to enhance our Cyber Security posture. Interpret business requirements into technical deliverables and clearly communicate security risks to relevant stakeholders ranging from business leaders to analysts. Prioritize, implement, and track remediation efforts based on ongoing recommendations from Defender for Cloud Configure logging for cloud resources to integrate with our corporate SIEM. Manage and enhance our Azure Active Directory (AAD) policies to control user access and privileges effectively. Monitor and provide configuration review/enhancements on network security groups (NSGs), Application Security Groups (ASGs), Azure Firewalls and other cloud based network security tooling. Support the delivery of ERM's Cyber Strategy and Roadmap, leading on major Cyber Security initiatives such as embedding security controls into deployment lifecycles, designing threat modelling processes, defining security hardening standards and defining ERM's cloud security standards. Ensure that new cloud resources are integrated into the existing ERM vulnerability management framework and lead the remediation of identified findings. Provide subject matter expertise on Cybersecurity engineering to other technology and business teams, as well as governance forums. Create and maintain comprehensive security documentation including standards, baseline configuration and procedures. Lead the security governance for cloud-based systems at ERM, highlighting non-compliance from corporate standards and providing system/service owners with remediation guidance. Support incident investigations and remediation activities. Proactively monitor changes in the threat landscape and adapt tools to combat emerging threats. Proactively maintain awareness in latest cyber security cloud practices, processes and technologies.

Skills, Qualifications and Capabilities Description:

We are looking for someone who can demonstrate the below: Solid foundation in cybersecurity and information security principles Demonstrated proficiency in problem-solving, adept in quickly grasping new technology stacks, and a collaborative mindset for cross-functional teamwork Familiarity with leading compliance assessments and remediation of environments against security frameworks and industry best practices, including CIS, NIST, and ISO27001 Extensive hands-on experience with Microsoft Security solutions, encompassing Defender for Cloud, Sentinel, 365 Defender, and Azure Active Directory. Thorough understanding of network security concepts, spanning NSGs, firewalls, and VPNs. Proficient in scripting languages such as KQL and PowerShell, with a track record of practical application. A firm understanding of Zero Trust Principles with practical implementation experience

Useful Skills or Interests:

Any of these are a bonus, but not necessary to apply Microsoft certifications such as Azure Security Engineer Associate AZ-500 Cybersecurity Architect Expert SC-100 Security Operations Analyst Associate SC-200 Microsoft Identity and Access Administrator SC-300 AWS experience Experience of SAST and SCA tooling such as GitHub Advanced Security in CI/CD pipelines Experience securing containerized applications. Experience of implementing automated compliance and security checks via Azure Policies or other tooling Familiarity with Git-based source control Configuration alignment of Operating systems, software or services to Center for Internet Security (CIS) benchmarks Experience managing infrastructure with infrastructure as code tools, specifically Terraform. Experience working in a DevSecOps operating model and knows how best to facilitate change in delivery teams to adopt this model of working. Soft Skills: Excellent written and verbal communication skills Determination and motivation to succeed. Enthusiastic, with a positive 'can-do' attitude Ability to effectively prioritize and execute tasks in a high-pressure environment. Gains the respect of colleagues and is a team player focused on results over personal preferences. Highly self-directed, with keen attention to detail Has strong communication, project and time management skills. Experience working both independently and in a team-oriented, collaborative environment. Flexible and adaptable in learning and understanding new technologies. Proven analytical and problem-solving abilities. Strong orientation towards customer service

  • Bengaluru, Karnataka, India Mindsprint Full time

    Position:Sr Engineer /Lead Engineer - Cyber SecurityLocation:Chennai/BangaloreSummary:We're seeking a seasoned Senior Cyber Security Engineer with 6-8 years of experience to fortify our team. Your role involves ensuring the security of cloud infrastructure and applications through meticulous assessment and implementation of robust security measures.Key...


  • Bengaluru, Karnataka, India Alp Consulting Limited Full time

    Cyber Security EngineerDuties & ResponsibilitiesTo write an effective cyber security engineer job description, begin by listing detailed duties, responsibilities and expectations. We have included cyber security engineer job description templates that you can modify and use.Sample responsibilities for this position include:Execute Security Testing of...


  • Bengaluru, Karnataka, India Mindsprint Full time

    Position: Sr Engineer /Lead Engineer - Cyber Security Location: Chennai/Bangalore Summary: We're seeking a seasoned Senior Cyber Security Engineer with 6-8 years of experience to fortify our team. Your role involves ensuring the security of cloud infrastructure and applications through meticulous assessment and implementation of robust security measures....


  • Bengaluru, Karnataka, India Alp Consulting Limited Full time

    Cyber Security Engineer Duties & Responsibilities To write an effective cyber security engineer job description, begin by listing detailed duties, responsibilities and expectations. We have included cyber security engineer job description templates that you can modify and use. Sample responsibilities for this position include: Execute Security Testing...


  • Bengaluru, Karnataka, India WEN Full time

    Role : Cyber Security Consultant - Lead CSRO (Only Female : The Cyber/Cloud Security and Risk Officer (CSRO) aims to contribute to the steering of strategy in terms of public cloud security, technical standards, processes, tools and risk management.Experience : 10 yrs + Defines, publishes and maintains processes for Security Governances, Risk and...

  • Cyber Security

    1 week ago


    Bengaluru, Karnataka, India MUFG Global Service (MGS) Full time

    About the Role: Position Title: Senior Analyst - Cyber Security Location: Bengaluru Job Profile Position details: To ensure effective management and control of Cyber Security, IT and information risk for MUFG EMEA entities by ensuring all appropriate Security, IT and common sense controls are in place, that these controls are being followed and that...


  • Bengaluru, Karnataka, India Live Connections Full time

    Hi All Greetings from Live Connections We have an urgent requirement on Cyber Security Engineer role with one of our MNC based company in Mumbai and Bangalore Location. Please find the below job description and kindly share me your updated CV to Position Title: Cyber Security Engineer role Experience Level: 6-9 Years Mode: Hybrid Duration: Full Time...

  • Cyber Security

    1 week ago


    Bengaluru, Karnataka, India MUFG Full time

    About the Role:Position Title: Senior Analyst - Cyber SecurityLocation: BengaluruJob Profile:Position details:To ensure effective management and control of Cyber Security, IT and information risk for MUFG EMEA entities by ensuring all appropriate Security, IT and common sense controls are in place, that these controls are being followed and that this is...


  • Bengaluru, Karnataka, India Elevation Capital Full time

    Everstage is a fast-growing B2B SaaS startup founded in 2020 by Siva Rajamani (Freshworks alum) and Vivek Suriyamoorthy (D.E.Shaw alum) in the Sales Performance Management category. In less than four years, we were able to win customers across four continents and count several known global companies like Paychex, Postman, Chargebee, Hackerrank, Uniphore,...


  • Bengaluru, Karnataka, India Euromonitor Full time

    Euromonitor International is the world leader in strategic and tactical business research and analysis. A recognised innovator, consistently out-performing our peers –we now have 15 offices in 14 countries with around 1,200 staff and a further 800 + contributing analysts in over 80 countries around the world. We have come a long way from our beginnings in...


  • Bengaluru, Karnataka, India MUFG Global Service (MGS) Full time

    Cyber Security Specialist Position AssistantVice President Job Responsibilities: This is a Security Engineering role supporting the Asia Region in implementing and maintaining controls to protect the Organization against risks associated with Technology Threats from both Internal and External. The candidate will be expected to be a Subject Matter Expert...


  • Bengaluru, Karnataka, India Euromonitor Full time

    Euromonitor International is the world leader in strategic and tactical business research and analysis. A recognised innovator, consistently out-performing our peers –we now have 15 offices in 14 countries with around 1,200 staff and a further 800 + contributing analysts in over 80 countries around the world. We have come a long way from our beginnings in...


  • Bengaluru, Karnataka, India ABB Full time

    R&D Cyber security EngineerTake your next career step at ABB with a global team that is energizing the transformation of society and industry to achieve a more productive, sustainable future.At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking...


  • Bengaluru, Karnataka, India ABB Full time

    R&D Cyber security EngineerTake your next career step at ABB with a global team that is energizing the transformation of society and industry to achieve a more productive, sustainable future.At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking...


  • Bengaluru, Karnataka, India ABB Full time

    R&D Cyber security EngineerTake your next career step at ABB with a global team that is energizing the transformation of society and industry to achieve a more productive, sustainable future.At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking...


  • Bengaluru, Karnataka, India ABB Full time

    R&D Cyber security EngineerTake your next career step at ABB with a global team that is energizing the transformation of society and industry to achieve a more productive, sustainable future.At ABB, we have the clear goal of driving diversity and inclusion across all dimensions: gender, LGBTQ+, abilities, ethnicity and generations. Together, we are embarking...


  • Bengaluru, Karnataka, India Ceragon Full time

    Job DescriptionCeragon is looking to hire a cyber security engineer with an analytical mind and a detailed understanding of cybersecurity methodologies, practices and systems. Cyber security engineer is expected to have rigorous attention to details, outstanding problem-solving skills, work comfortably under pressure, and deliver on tight deadlines. To...


  • Bengaluru, Karnataka, India Ceragon Full time

    Job Description Ceragon is looking to hire a cyber security engineer with an analytical mind and a detailed understanding of cybersecurity methodologies, practices and systems. Cyber security engineer is expected to have rigorous attention to details, outstanding problem-solving skills, work comfortably under pressure, and deliver on tight deadlines. To...


  • Bengaluru, Karnataka, India HECTADATA INDIA TECHNOLOGY CONSULTING PRIVATE LIMI Full time

    Job title : Cyber Security Engineer. Years of experience : 5-10 years.Location : Bangalore.What will you be doing : You will work with the DLP squad supporting Engineering & Operational tasks involved in data security services, ranging from service delivery, task automation, DevOps tasks and supporting an on-call rota. Working with the DLP squad & wider...


  • Bengaluru, Karnataka, India Exide Energy Solutions Ltd Full time

    Cyber Security Manager Position at Exide EnergiesWe are in search of a highly skilled Cyber Security Manager to join our cutting-edge manufacturing company, Exide Energies. As a subject matter expert in Cyber Security and Information Security, you will lead the IT Security portfolio.Main Responsibilities:To develop a strategy for implementing security...