Cloud Security Engineer

ClearView Healthcare Partners; Gurugram District; On-site; INR 1,500,000 - 2,700,000; Full time

Job summary

ClearView Healthcare Partners is expanding its India office in Gurugram and seeks a Cloud Security-focused Information Security Professional to lead Azure security architecture, CSPM, and monitoring initiatives. You will support migration of on‑prem resources to the cloud while ensuring secure configurations and compliance across environments.

The role emphasizes Azure Defender, IAM governance, and incident response, with collaboration across IT and security teams globally.

Qualifications

• Experience securing Azure/AWS environments in enterprise settings.
• Knowledge of cloud security best practices and CSPM.
• Familiarity with identity governance and conditional access.
• Ability to write and maintain security documentation and runbooks.

Responsibilities

• Design and implement secure Azure architecture and governance.
• Monitor and improve security controls (Defender for Cloud, SIEM) across cloud and on‑prem
• Perform identity and access reviews, least‑privilege enforcement.
• Lead vulnerability management and remediation coordination with teams.
• Maintain security playbooks, policies, and evidence for audits.
• Assist with incident triage and post‑incident analysis and reporting.

Skills

Cloud security

Azure

SIEM

Identity governance

Policy and governance

Tools

Azure Defender

Azure Policy

Azure AD

NSGs

Job description

Company Overview

ClearView Healthcare Partners is a premier life sciences strategy consulting firm headquartered in Boston, with offices in San Francisco, New York City, London, Zurich and Gurgaon. Serving clients in the biopharmaceutical, medical device, and diagnostic spaces, we provide world-class strategic decision-making support across a diverse range of business issues. Our goal is to inform actionable recommendations that allow companies to achieve their business objectives.

ClearView is in the process of migrating a significant portion of its local, on-premises resources to the cloud, and this role will be a key player in ensuring that migration happens securely and that our Azure environment is configured and governed to a high standard. ClearView is looking for a Cloud Security-focused Information Security Professional to join our Information Technology team. This role will be responsible for three main areas: Cloud Security Architecture & Operations (with an emphasis on Azure), SIEM engineering, and Monitoring/Testing to ensure compliance. This position requires the ability to work with minimal direction, flexibility to changing demands, and having an eye for process improvement. This position will work in our India office but will be responsible for ClearView’s Information Security globally.

Cloud security architecture and operations

• Support the security workstream of ClearView’s ongoing migration of on-premises resources to the cloud, helping ensure new Azure workloads are designed and configured securely from the outset.
• Help configure, monitor, and continuously improve security controls in Azure (with secondary support for AWS), including Defender for Cloud, Security Hub/GuardDuty, IAM, Network Security Groups (NSGs), and baseline configurations.
• Support identity governance in Microsoft Entra ID (Azure AD), including conditional access, privileged role assignments, and application/service principal reviews.
• Assist with authoring, deploying, and monitoring Azure Policy definitions and initiatives to enforce configuration standards and compliance guardrails across subscriptions.
• Support cloud security posture management (CSPM) efforts, identifying and remediating misconfigurations across Azure and AWS environments.
• Assist with design and review of cloud architecture for security best practices, including network segmentation (NSGs, firewalls), least-privilege IAM, and encryption at rest and in transit.
• Support secrets and key management practices using Azure Key Vault, including access policy reviews, rotation, and integration with applications and pipelines.
• Help assess and improve the security of containerized workloads (e.g., image scanning, registry access controls, AKS/container runtime configuration) as more services move to container-based architectures.
• Assist with periodic reviews of access controls, MFA configurations, and conditional access policies across cloud and on-prem environments.
• Support vulnerability management activities by collecting scan results, tracking remediation status, and validating fixes with relevant teams.
• Contribute to standard build/hardening checklists for cloud resources, servers, and laptops, and verify that new systems are deployed according to these baselines.

Security monitoring and incident support

• Monitor cloud-native security tools and dashboards (e.g., Defender for Cloud, Security Hub, GuardDuty) as well as core SIEM, endpoint security, and email security tools for alerts and suspicious activity; help triage and elevate as needed.
• Support tuning of SIEM correlation rules and alert thresholds to reduce noise, under the guidance of senior staff.
• Build and maintain dashboards and reports (cloud and SIEM) that give IT and leadership visibility into security events and trends.
• Assist in initial investigation of security incidents (log collection, basic analysis, documentation) and support remediation steps defined by senior engineers.
• Follow established runbooks and procedures for incident response and request enhancements when gaps are identified.

Endpoint and identity security

• Help manage endpoint security tools (EDR/AV, disk encryption, device posture checks) and respond to endpoint alerts following documented procedures.
• Assist with implementation and maintenance of identity and access controls (e.g., role-based access, privilege reviews, account lifecycle processes).

Operational processes and documentation

• Maintain up-to-date technical documentation for cloud security controls, dashboards, playbooks, and standard operating procedures.
• Support periodic security reviews and audits by gathering evidence, screenshots, and export