Unit Manager - Information Security

Information security team member who is proficient in maintaining managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.

• A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert risks.
• Security Posture Monitoring: Implement and manage SIEM CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint). Continuously assess cloud configurations for security risks and compliance violations. Monitor for drift from secure baselines and enforce remediation workflows.
• Risk Identification Remediation: Detect misconfigurations, excessive permissions, and insecure storage or networking setups. Collaborate with cloud engineering and DevOps teams to remediate findings. Prioritize risks based on impact and likelihood.
• Incident Response Forensics: Investigate alerts and anomalies flagged by CSPM tools. Support cloud incident response and post-mortem analysis. Maintain logs and evidence for forensic investigations.
• Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
• B- Additional Accountabilities pertaining to the role
• Manage maintain security tool Microsoft Sentinel Palo Alto Prisma Cloud.
• Maintain compliance as per organization compliance policy.
• Highlight risk mitigation plan.
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Risk analysis and mitigation.
• Vendor coordination.
• Strong troubleshooting, analytical, and communication skills.
• Energetic, self-motivated and self-sufficient in accomplishing tasks.
• Good analytical and problem solving skills.

• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take require steps.
• Discuss observation response as applicable improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.
• Potential regulatory actions due to non-compliances.

• Handling of fast changing environment with variety of cloud service providers.
• Handling of compliance expectations in stringent timelines.
• Handling multiple stakeholders at a time.
• Coordination with third party consultants who assist in auditing and compliance initiatives.

• Minimum 6+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
• Minimum 6+ years in Information / Cyber / application security.

• Knowledge hands-on experience on CSPM CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
• Experience in Project management.
• Positive attitude, Hard Worker and team player
• Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage