Cloud Security Specialist

S&P Global Market Intelligence; Hyderabad; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

S&P Global Market Intelligence seeks an experienced cloud security professional to support enterprise-wide security programs across multiple cloud platforms. You will define controls, deploy tooling, and architect secure solutions with automation at scale.

Responsibilities include managing security tooling, developing SOPs, and collaborating with Security Operations to handle incidents and metrics. Strong scripting, Kubernetes, and GenAI awareness are essential.

Qualifications

• Bachelor's degree or industry equivalent in cybersecurity or engineering.
• 3–5 years of cloud experience (GCP, AWS, Azure).
• Knowledge of CSA CCM, CIS, NIST benchmarks.

Responsibilities

• Support enterprise cloud security program development and execution.
• Define and manage security controls for multi-cloud architecture.
• Configure, maintain, and write rules in cloud security tools.
• Design and implement tooling to meet requirements.
• Develop SOPs and trainings for each technology.
• Architect and improve security tech stack, processes, and response models.
• Review alerts from cloud security tools and escalate as needed.
• Promote adoption of cloud security tooling across the enterprise.
• Partner with Security Operations to respond to incidents.
• Develop and report cloud security coverage metrics and remediation plans.
• Define procedures to validate effectiveness of controls in cloud environments.
• Research generative AI, ML, deep learning to identify integration opportunities.

Skills

Cloud security

Multi-cloud

Scripting

Kubernetes & Docker

Security tooling

CI/CD

Python/Go/Java

Linux/Mac/Windows

GenAI awareness

Automation

Education

Bachelor's degree in cybersecurity

Tools

GuardDuty

AWS Config

Amazon Inspector

CWPP

SASE/CASB

Job description

Job Summary

About the Role:

Grade Level (for internal use): 11

Responsibilities

• Support the development and execution of enterprise-wide Cloud security program
• Define and manage security controls for a multi-cloud architecture
• Configure, maintain, deploy, and write rules in Cloud security tools
• Design and implement 3rd party and cloud-native tooling to meet defined requirements
• Develop standard operating procedures and trainings for each technology
• Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions utilizing automation where possible
• Review and investigate alerts generated from Cloud security tools and elevate as appropriate
• Review and assess utilization of Cloud security tooling
• Promote and drive adoption of Cloud security tooling across the enterprise
• Partner across the Security Operations team to respond to cybersecurity incidents
• Develop and report Cloud security coverage metrics and remediation plans
• Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of Cloud networks and technology platforms
• Conducting research to stay up-to-date with the latest advancements in generative AI, machine learning, and deep learning techniques and identify opportunities to integrate them into our products and services.

Qualifications

• BachelorsDegree or industry equivalent work experience in cybersecurity, international securityarchitecture, and/or engineering in a converged security program
• 3-5 years of experience operating with at least one cloud provider, preferably GCP, Azure, or AWS
• Strong understanding of Cloud security industry standards and best practices (CSA CCM, CIS, NIST benchmarks, etc.)
• Proficient use of Linux, MacOS, and Windows Operating System tools
• Operating and maintaining tools across Cloud security technology stack (CSPM, CWPP, SASE, CASB, CIEM, Cloud native features like GuardDuty, AWS Config, Amazon Inspector, etc.)
• Ability to visualize and integrate cloud specific data and alerts with other security systems
• Advanced hands-on experience using one or more programming/scripting languages (e.g., Python, Go, Java, Terraform, etc.)
• Experience in a multi-cloud or hybrid cloud environment
• Working knowledge of SecDevOps and Shift Left concepts
• Technical knowledge of Kubernetes and Docker technologies and associated security requirements (Kubernetes, Docker, etc.)
• Experience contributing to the system design (architecture, design patterns, reliability, and scaling) of new and current cloud based GenAI services.
• Familiarity with source code management and CI/CD tools (e.g., Github, Bitbucket, Jenkins, Artifactory, etc.)
• At least one associate level cloud certification (AWS solutions architect, GCP Associate CloudEngineer, etc.)