Cloud Security Lead

# Infrastructure Governance & Resilience Lead ## Company Overview *Not specified.* ## Job Summary The **Infrastructure Governance & Resilience Lead** is responsible for ensuring the **real-time security posture** of the cloud platform and applications. This role involves detecting, validating, and responding to vulnerabilities, threats, and misconfigurations. Acting as an independent security control function, the lead ensures that all infrastructure and platforms built and operated by engineering teams remain **secure, resilient**, and **free from exploitable risks**. The position plays a critical role in maintaining the organization's security integrity and supporting compliance and audit requirements. ## Responsibilities - **Cloud Security Posture Management:** Own and operate cloud security platforms such as Prisma, Qualys, and Sentinel One to continuously monitor infrastructure, workloads, and configurations. Drive timely remediation of vulnerabilities and misconfigurations to ensure no insecure or non-compliant workloads exist. - **Threat Detection & Response:** Manage security monitoring and threat detection ecosystems using platforms like Chronicle. Detect, investigate, and coordinate responses to security incidents, anomalies, and potential breaches. Develop and implement incident response playbooks in collaboration with SRE and Platform teams. - **Identity & Access Validation:** Validate identity and access controls across the platform, including IAM configurations, role definitions, and privileged access mechanisms. Ensure privileged access is secure, compliant, and fully traceable through systems such as CyberArk. - **Security Remediation Validation:** Act as the technical validator for all security-related fixes, ensuring vulnerabilities and risks are fully addressed. Revalidate fixes and confirm no residual risks remain before closing issues. - **Proactive Risk Management:** Continuously identify potential risks, weak configurations, and emerging threat vectors. Provide recommendations to platform engineering teams to improve architecture, controls, and overall security posture. - **Collaboration & Governance:** Raise findings to Platform and SRE teams for remediation and track them to closure. Support governance teams by providing evidence, validation, and insights required for audits and compliance. ## Qualifications - 10–15 years of experience in **cloud security, cybersecurity operations, or threat management** roles. - Strong expertise in **cloud security posture management tools** (e.g., Prisma, Qualys), **SIEM platforms**, and **vulnerability management**. - Experience implementing **Zero Trust** and **identity security frameworks**. - Knowledge of security in **BFSI (Banking, Financial Services, and Insurance)** or other **regulated environments**. - Proficiency in **security incident detection, investigation, and response**. - Deep understanding of **identity and access management (IAM)**, privileged access controls, and security validation processes. - Familiarity with **security compliance standards** and audit processes. ## Preferred Skills - Experience working in **regulated industries** such as BFSI. - Strong analytical and **evidence-driven** approach to security validation. - Ability to operate independently as a **control function** while collaborating effectively with engineering teams. - Excellent communication skills for reporting findings and providing security insights. - Knowledge of **cloud security frameworks** such as **Zero Trust**. ## Experience - **10 to 15 years** of relevant experience in **cloud security, cybersecurity operations, or threat management**. - Proven track record in **security monitoring, incident response, and vulnerability management**. - Experience working in **regulated environments** like BFSI is preferred. ## Environment - The role involves working in a **collaborative, fast-paced environment** focused on **cloud security and infrastructure resilience**. - The position may require **remote, in-office, or hybrid work arrangements** depending on organizational policies. - The role involves **interacting with cross-functional teams** including Platform Engineering, SRE, and Governance. ## Salary *Not specified.* ## GrowthOpportunities *Not specified.* ## Benefits *Not specified.*