Cloud Native Application Protection (Ghaziabad)

Role : Cloud Native Application Protection (CNAPP) Experience: 7 to 12 Years Location: Pune Notice period: Serving NP/30 Days Shifts: Should be comfortable for rotations must Work model: Should be comfortable for both Hybrid and complete 5 days WFO Job Description We are seeking a skilled and motivated Cloud Security Engineer to join the CTE to support the deployment and operationalisation of a Cloud Native Application Protection (CNAPP) service across multi-cloud environments. You will work closely with software engineers, cloud platform teams, operations to ensure our services meet availability and performance goals. Responsibilities - Implement cloud security guard rails using CNAPP tools across multi-cloud environments (AWS, GCP, Azure) to meet security requirements. - Implement changes to CNAPP platform using DevOps pipeline and infrastructure as code (Terraform cloud formation etc.) to apply changes. - Write script to extract cloud security data point for global reporting e.g. python, - Review and assess cloud security findings (permissions, misconfigurations, detections), out of box vendor rules, accuracy of detection and identify false positives to fine tune the solution. - Partner with cloud architects, DevOps, IT Service owners, and SOC teams to ensure cloud security controls are met, and support incidents management when required. Requirements - Hands on experience with cloud native application security solution and cloud security posture management tools e.g. CrowdStrike, Wiz, Orca, Prisma cloud - Cyber security experience with cloud security (AWS, GCP, Azure, AliCloud) risks and controls does a violation present a material risk, why and potential impact. - Robust collaboration and stakeholders management - Experience in building and deploying applications on the Cloud, using CI/CD frameworks and Infrastructure automation, such as: Jenkins, Terraform, Ansible, GitHub, Nexus and Jenkins. - Extensive working knowledge of software development tools and technologies; specifically, Python, Bash, PowerShell, SQL, and data formats such as XML, JSON, CSV - Nice to have: CSP security certificate e.g. AWS/GCP/Azure certified security speciality, .