CDTR-Cybersecurity - Cloud Security-Senior Associate -Bangalore

Industry/Sector

Not Applicable

Specialism

Cybersecurity & Privacy

Management Level

Senior Associate

Job Description & Summary

• • Design scalable security processes and governance for private, hybrid, and multi-cloud environments (AppSec/DevSecOps aligned) 

  • Build and implement cloud, container, and application security strategy, including SSDLC practices 

  • Identify security vulnerabilities on web applications, infrastructure systems, network equipment, Wi-Fi systems, mobile applications, API, etc. 

  • Provision secure landing zones and cloud infrastructure using Terraform/IaC across AWS, Azure, and GCP 

  • Embed security scanning into CI/CD (IaC, images, secrets, SAST, DAST, dependency/SCA)  including Pipeline Hardening, Artifact repository ( JFrog,Nexus) and Binary provenance 

  • Implement automated governance and policy enforcement (policy-as-code, tagging, preventive guardrails, CI/CD security gates, and CNAPP controls) 

  • Implement API security - API gateways security, OAuth and/JWT misconfigurations 

  • Conduct cloud security assessments, source code reviews to detect security flaws and propose mitigation/remediation plans 

  • Develop proof-of-concept (PoC) exploits for validated vulnerabilities. 

  • Harden software supply chain and runtime workloads (signing/integrity, access controls, configuration management, EDR/runtime protection) 

  • Enable monitoring and response by integrating logs with SIEM/SOAR and defining detection/remediation workflows 

  • Conduct posture assessments and security reviews (config, code, permissions, and logs) and coach teams on remediation 

  • Provide guidance/training and support continuous upskilling (cloud security and DevSecOps) 

  Qualifications 

  • Proven experience in DevSecOps and Application Security technologies 

  • Experience working with cloud platforms such as AWS/Azure/GCP 

  • Strong understanding of secure SDLC, threat modeling, and vulnerability management. 

  • Hands-on experience with application security tools in SAST, DAST, SCA, and API security testing Eg: Burp Suite, Metasploit, Nmap, Nessus, Wireshark, Kali Linux, Nikto, Fortify, ZAP, MobSF  

  • Proficiency in common programming languages (Git, Java, JavaScript, Python, Rust, Go, C#, etc.) 

  • Strong hands-on experience with Terraform and Infrastructure-as-Code practices 

  • Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or Azure DevOps 

  • Good understanding of OWASP Top 10, secure coding practices, and common vulnerabilities 

  • Experience with AI tools-Copilots, Agents building use cases as per project requirements 

  • Good to have experience with the below tools  

    • CNAPP (Prisma, Wiz, Orca) 
    • SAST (Checkmarx, Fortify, Veracode) 
    • Secrets scanning (TruffleHog, GitGuardian) 

  • Strong analytical, problem-solving, and communication skills 

  Preferred Qualifications   

  • Bachelor’s degree in computer science, Computer/Systems Engineering, or a related field 

  • Cloud certifications : 

  • Azure (AZ-500, AZ-400, AI-102) 

  • AWS- AWS Certified SecurityEngineer/ AWS Certified DevOps Engineer 

  •  GCP - Professional Cloud Security Engineer, Professional Cloud DevOps Engineer) 

Travel Requirements

Not Specified

Job Posting End Date