Cloud Security Analyst

Deloitte Shared Services India; Mumbai; On-site; INR 600,000 - 1,200,000; Full time

Job summary

Deloitte Shared Services India in Mumbai seeks a Cloud Security Analyst to help secure cloud environments, enforce governance, and support compliance with standards across AWS, Azure, and GCP.

You will assist CSPM, IAM reviews, encryption, logging, and MFA, monitor for vulnerabilities, participate in audits, and collaborate with Infra/DevOps/Application teams to implement best practices and provide audit-ready documentation.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Fundamentals of CSPM, IAM, encryption, logging and monitoring.
• Familiarity with AWS/Azure/GCP security services.

Responsibilities

• Assist in implementing cloud security controls across AWS, Azure, and GCP.
• Support cloud governance activities, including policy enforcement and compliance monitoring.
• Monitor cloud environments for security alerts, misconfigurations and vulnerabilities.
• Participate in cloud security assessments, audits, and risk evaluations.
• Review IAM configurations and enforce least privilege.
• Maintain cloud security documentation and audit evidence.

Skills

Cloud security fundamentals

CSPM concepts

IAM configurations

Cloud governance

SIEM familiarity

Networking fundamentals

Linux/Windows basics

Risk and compliance

Analytical & documentation

Education

Bachelors degree in CS/IT/Cybersecurity

Tools

CSPM tools

Cloud-native security services

SIEM

Job description

Role Overview

Join Deloittes Cybersecurity team to support organizations in securing cloud environments, strengthening cloud governance, and maintaining compliance with security standards. The role involves assisting with cloud security operations, monitoring, risk assessments, security controls implementation, and governance activities across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

Key Responsibilities

• Assist in implementing and maintaining cloud security controls across AWS, Azure, and GCP.
• Support cloud governance activities, including policy enforcement, resource tagging, and compliance monitoring.
• Monitor cloud environments for security alerts, misconfigurations, vulnerabilities, and potential risks.
• Participate in cloud security assessments, audits, and risk evaluations.
• Identify and support remediation of cloud security posture issues using Cloud Security Posture Management (CSPM) tools.
• Review Identity and Access Management (IAM) configurations, user permissions, and role assignments.
• Support implementation of security best practices, including least privilege, encryption, logging, and Multi-Factor Authentication (MFA).
• Assist with compliance activities aligned with ISO 27001, SOC 2, CIS Benchmarks, PCI DSS, and GDPR.
• Collaborate with Infrastructure, DevOps, and Application teams to support secure cloud deployments.
• Maintain cloud security documentation, governance policies, procedures, and audit evidence.
• Stay updated on emerging cloud security threats, vulnerabilities, and industry best practices.

Mandatory Technical Skills

• Basic understanding of AWS, Microsoft Azure, or GCP.
• Cloud Security Fundamentals and Cloud Governance.
• Cloud Security Posture Management (CSPM) concepts.
• Identity and Access Management (IAM).
• Cloud Networking, Encryption, Logging, and Security Monitoring.
• Networking fundamentals: TCP/IP, DNS, Firewalls, and VPNs.
• Basic knowledge of Linux and Windows operating systems.
• Understanding of Vulnerability Management, Risk, and Compliance.
• Familiarity with SIEM and cloud-native security services.
• Good analytical, troubleshooting, documentation, and communication skills.

Exposure to one or more of the following:

• Microsoft Defender for Cloud
• AWS Security Hub
• AWS Config
• Azure Policy
• Cloud Security Posture Management (CSPM) tools
• SIEM and cloud-native monitoring solutions

Good to Have

• Basic scripting knowledge in Python, PowerShell, or Bash.
• Understanding of cloud compliance and security frameworks.
• Experience with cloud security assessments or audit support.
• Familiarity with cloud vulnerability and misconfiguration management.

Preferred Certifications

• AWS Certified Cloud Practitioner
• Microsoft Azure Fundamentals (AZ-900)
• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)
• Google Associate Cloud Engineer
• CompTIA Security+
• ISC2 Certified in Cybersecurity (CC)

Education

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, or a related discipline.