Cluster Manager /Senior Cluster Manager - Information Security

Bajaj Finance; Pune District; Presencial; INR 900.000 - 1.800.000; Jornada completa

Descripción de la vacante

Bajaj Finserv Limited is seeking an Information Security professional to maintain and enhance cloud security posture across major cloud platforms. The role focuses on CSPM, CWP, and container security, integrating security into the software development lifecycle.

You will work with the SOC and cloud engineering teams to remediate findings, manage security tools like Microsoft Sentinel and Palo Alto Prisma, and ensure compliance with policy and audits.

Formación

• 3+ years in Cloud Security Posture management and Cloud workload protection.
• Hands-on CSPM/CWP tool administration with Palo Alto Prisma, AV/EDR, and SIEM.
• Certifications like CEH or Azure/AWS security are a plus.

Responsabilidades

• Monitor and improve cloud security posture across AWS, Azure, GCP.
• Manage CSPM tools, enforce compliance, and mitigate alert risks.
• Investigate security alerts and forensics, support incident response.
• Collaborate with Cloud engineering/DevOps to remediate findings.
• Maintain security policies, configurations, and incident reports.
• Ensure container security and security integration in SDLC.

Conocimientos

CSPM

CWP

Cloud security

Threat detection

Project management

Educación

Bachelor's degree in CS/IT

Herramientas

Palo Alto Prisma

Microsoft Sentinel

AV/EDR

Vulnerability management tool

FIM

Descripción del empleo

Job Summary

Information security team member who is proficient in maintaining managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.

Duties and Responsibilities

• A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert risks.
• Security Posture Monitoring: Implement and manage SIEM CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint).
• Continuously assess cloud configurations for security risks and compliance violations.
• Monitor for drift from secure baselines and enforce remediation workflows.
• Risk Identification Remediation: Detect misconfigurations, excessive permissions, and insecure storage or networking setups.
• Collaborate with cloud engineering and DevOps teams to remediate findings.
• Prioritize risks based on impact and likelihood.
• Incident Response Forensics: Investigate alerts and anomalies flagged by CSPM tools.
• Support cloud incident response and post-mortem analysis.
• Maintain logs and evidence for forensic investigations.
• Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
• Additional Accountabilities pertaining to the role: Manage maintain security tool Microsoft Sentinel Palo Alto Prisma.
• Maintain compliance as per organization compliance policy.
• Highlight risk mitigation plan.
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Risk analysis and mitigation.
• Vendor Co-ordination.
• Strong troubleshooting, analytical, and communication skills.
• Energetic, self-motivated and self-sufficient in accomplishing tasks.
• Good analytical and problem solving skills.

Key Decisions / Dimensions

• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take required steps.
• Discuss observation response as applicable and improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes. Potential regulatory actions due to non-compliances.

Major Challenges

• Handling of fast changing environment with variety of cloud service providers.
• Handling of compliance expectations in stringent timelines.
• Handling multiple stakeholders at a time.
• Coordination with third party consultants who assist in auditing and compliance initiatives.

Required Qualifications and Experience

• a) Qualifications: Minimum 3+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
• Minimum 3+ years in Information / Cyber / application security.
• b) Work Experience:
  • Knowledge hands-on experience on CSPM CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
  • Experience in Project management.
  • Positive attitude, Hard Worker and team player
  • Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage