Security Analyst

Cloudxtreme; Mumbai; Hybrid; INR 1,800,000 - 2,600,000; Full time

Job summary

Cloudxtreme is seeking a Security Analyst/Architect for Mumbai-based hybrid work. You will oversee end-to-end enterprise security, governance, IAM support, vulnerability assessments, and coordination across security, cloud, and DevOps teams.

Key duties include reviewing access gaps, validating architecture, implementing controls across AWS/Azure/GCP, and leading risk assessments. Strong communication and certifications are desirable.

Qualifications

• Experience in information security governance, architecture review, and project delivery.
• Strong IAM/IDAM concepts and privileged access practices.
• Hands-on with cloud security across AWS/Azure/GCP.
• Familiar with NIST, ISO 27001, GDPR, HIPAA.
• Excellent communication and documentation skills.
• Bachelor's degree in IT/Security; Security+, CISM, AWS/Azure Security preferred.

Responsibilities

• Review access reports, identify gaps and excessive privileges.
• Coordinate reviews with owners, HR, IT, and auditors.
• Review security architecture across cloud and on-prem.
• Translate requirements into well-architected security solutions.
• Lead or support cybersecurity projects per standards.
• Act as SME for IAM/IDAM, SSO, MFA, PAM.
• Strengthen cloud/infrastructure security across AWS/Azure/GCP.
• Collaborate with DevOps to embed security in CI/CD.
• Conduct vulnerability assessments, threat modelling, risk analysis.
• Support incident response investigations and containment.

Skills

IAM/IDAM concepts

Cloud security

Security architecture

Vulnerability assessment

CI/CD security

Scripting

Communication & coordination

55+? years experience

Education

Bachelor's degree in IT/Security

Tools

SIEM

Vulnerability scanners

IDS/IPS

Identity & access management tools

Job description

Job Title: Security Analyst / Architect Location: Mumbai--- [, Hybrid] Department:Enterprise security architect

Role Overview

Responsible for end-to-end security oversight of the enterprise applications, including access governance, architecture validation, IAM support, vulnerability assessment, and coordination with stakeholders across applications, security, cloud, and operations teams.

Key Responsibilities

• Review reports, analyse access gaps, identify excessive privileges, SoD conflicts, and track closure with stakeholders.
• Coordinate with application owners, HR, IT, and auditors; ensure timely review cycles, evidence collection, and reporting.
• Review security architecture, validate data flows, and ensure security controls are properly designed across cloud and on-prem environments.
• Translate business and technical requirements into well-architected security solutions and provide guidance on control implementation.
• Lead or support planning, design, deployment, and documentation of cybersecurity projects aligned with standards and policies.
• Act as SME for IAM/IDAM (SSO, MFA, PAM, identity lifecycle); ensure alignment of application onboarding with identity standards.
• Strengthen cloud and infrastructure security across AWS/Azure/GCP, including perimeter controls (firewalls, WAF) and secure configurations.
• Collaborate with DevOps teams to integrate security practices into CI/CD pipelines and SDLC.
• Conduct vulnerability assessments, threat modelling, and risk analysis; recommend mitigation measures.
• Support incident response investigations and ensure proper containment, root-cause assessment, and recovery.

Required Skills & Qualifications

• 58 years of experience in information security, including access governance, architecture review, and project execution.
• Strong understanding of IAM/IDAM concepts and tools, authentication/authorization models, and privileged access practices.
• Technical proficiency across cloud platforms (AWS/Azure/GCP), network security, SIEM, vulnerability scanners, IDS/IPS, and automation scripting (Python/PowerShell/Bash).
• Familiarity with NIST, ISO 27001, GDPR, HIPAA, and related security frameworks.
• Strong analytical, coordination, communication, and documentation skills, including ability to present technical issues to non-technical stakeholders.
• Bachelor’s degree in IT/Security and preferred certifications (Security+, CISM, AWS/Azure Security).