Cloud Security & VM Lead

Persistent; Pune District; Hybrid; INR 2,800,000 - 4,800,000; Full time

Benefits offered by this job

Competitive salary

Growth opportunities

Hybrid work

Flexible hours

Health insurance

Long Service awards

Job summary

Persistent is seeking a hands-on Cloud Security & VM Lead to enhance security across cloud and on-prem environments. You will manage Prisma Cloud scans, validate findings, track remediation, and provide risk insights to technology and security leaders from Pune.

The role requires 8–12 years of IT/Cyber Security experience, with strong cloud security and vulnerability management expertise. Hybrid work with India-based operations is offered.

Qualifications

• Hands-on with Prisma Cloud for CSPM, CWPP, container security and compliance monitoring.
• Experience in vulnerability management across cloud and on-prem environments.
• Strong ability to build dashboards and remediation governance.

Responsibilities

• Operate cloud security controls across AWS, Azure, and GCP.
• Run Prisma scans, review alerts, validate findings, coordinate remediation.
• Manage end-to-end vulnerability lifecycle across cloud and on-prem.
• Build enterprise dashboards for security posture and reporting.

Skills

Cloud security

Vulnerability management

Prisma Cloud

Dashboarding

Automation

Cloud governance

Education

Bachelor's degree

Tools

Prisma Cloud

Tenable

Qualys

Rapid7 InsightVM

Nessus

Microsoft Defender Vulnerability Management

Job description

About Position:

We are seeking a hands-on Cloud Security && Vulnerability Management Lead to enhance our enterprise cloud security and vulnerability management program across both cloud and on-premise environments. This role will be pivotal in managing Prisma Cloud scans, validating security findings, building dashboards, tracking remediation efforts, and providing actionable risk insights to technology and security leaders.

• Role: Cloud Security & VM Lead
• Location: Pune
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Cloud Security Operations
• Operate and manage cloud security controls across AWS, Azure, and GCP environments.
• Administer Prisma Cloud for CSPM, CWPP, container security, compliance monitoring, identity risk, and workload security. Run periodic Prisma scans, review alerts, validate findings, and coordinate remediation with cloud engineering teams.
• Identify cloud misconfigurations, insecure services, exposed assets, excessive permissions, and configuration drift.
• Support secure-by-design cloud architecture reviews and control validation.
• Enterprise Vulnerability Management
• Own and operate the end-to-end vulnerability management lifecycle across cloud and on-premise infrastructure.
• Manage vulnerability identification, validation, prioritization, remediation tracking, exception management, and closure reporting.
• Cover vulnerabilities across cloud infrastructure, on-prem servers, endpoints, databases, containers, Kubernetes, network devices, and internet-facing assets.
• Define and monitor remediation SLAs for critical, high, and medium vulnerabilities.
• Improve vulnerability governance through recurring reviews with infrastructure, cloud, application, and business technology teams.
• Security Scanning and Tool Operations
• Operate enterprise scanning platforms such as Prisma Cloud, Tenable, Qualys, Rapid7 InsightVM, Nessus, or Microsoft Defender Vulnerability Management. Plan, schedule, and execute authenticated and unauthenticated scans across cloud and on-prem environments.
• Ensure scan coverage, credential health, asset onboarding, scanner availability, and false-positive validation.
• Conduct configuration compliance checks, container vulnerability scans, infrastructure scans, and external exposure assessments.
• Partner with asset owners to improve visibility of unmanaged, obsolete, internet-exposed, or high-risk assets.
• Dashboarding, Metrics, and Reporting
• Build and maintain operational and executive dashboards for vulnerability and cloud security posture.

Expertise You'll Bring:

• 8 to 10 years of IT/Cyber Security experience, with at least 4 to 5 years in cloud security or vulnerability management.
• Hands-on experience with Prisma Cloud, vulnerability scanning, and remediation governance.
• Strong understanding of cloud security principles and vulnerability management processes.
• Experience with scanning tools such as Tenable, Qualys, or Rapid7.
• Ability to build dashboards using reporting platforms.
• Knowledge of CIS Benchmarks, NIST CSF, and ISO 27001. Experience with automation tools and APIs. Certifications such as AWS Security Specialty, CCSP, or CISSP.
• Educational background: Bachelor's degree in a relevant discipline or equivalent practical experience.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."