Senior Information Security Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Implement, configure, and manage the organization's enterprise CNAPP platform across various cloud environments.

• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform.

• Set up integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools.

• Maintain CNAPP policies, rules, connectors, permissions, integrations, and configurations of the platform.

• Monitor platform health, coverage, data ingestion, scanning status, and any integration failures.

• Assess and implement new CNAPP features as the organization's cloud environment and security needs change.

• Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services.

• Collaborate with cloud engineering teams to establish secure cloud configuration baselines.

• Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services.

• Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context.

• Work with infrastructure and application teams to facilitate remediation efforts.

• Utilize CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and exploitable attack paths.

• Partner with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to enhance cloud security posture.

⛳️ Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience.

• Over 7 years of experience in Information Security, with substantial hands-on cloud security experience.

• Strong practical experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP.

• Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or similar technologies.

• Solid understanding of cloud security architecture, cloud IAM and least privilege, cloud networking and exposure, vulnerability management, containers and Kubernetes security, Infrastructure-as-Code security, cloud logging and monitoring, and security configuration management.

• Experience in analyzing and remediating cloud security findings.

• Proficient in working with APIs and automation using Python, PowerShell, or other equivalent scripting languages.

• Familiarity with CI/CD pipelines and DevSecOps practices.

• Capability to troubleshoot complex security integrations and cloud configurations.

• Strong analytical, problem-solving, documentation, and communication skills.

• Knowledge of MITRE ATT&CK, especially cloud-related attack techniques.

• Relevant certifications such as CCSP, CCSK, AWS Security Specialty, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, or CISSP/equivalent.

🏝️ Benefits

• Equal Opportunity Employer committed to fostering an inclusive, non-discriminatory workplace.

• Recognized as one of the Best Workplaces for Women and awarded Workplace with Inclusive Practices certifications.

• Acknowledged as one of the Fortune 100 Best Companies to Work For.