Security Posture Management Specialist

ITC Infotech; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

ITC Infotech is seeking a Security Posture Management Specialist to operate and continuously improve CSPM across cloud and enterprise environments. You will focus on CSPM, ASM, remediation governance, and security posture reporting to ensure risks are identified, prioritized, tracked, and monitored.

You will collaborate with Security Operations, Cloud Engineering, Infrastructure, Risk, Architecture, and Application teams to improve overall security posture and drive automation opportunities in

Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related field.
• Hands-on experience with CSPM solutions and cloud security across Azure and AWS.
• Experience managing security findings and driving remediation with multiple stakeholders.
• Familiarity with CIS Benchmarks, NIST CSF, NIST 800-53 and security reporting.

Responsibilities

• Operate and improve CSPM across Azure and AWS by monitoring configurations and managing findings.
• Prioritize security findings based on risk, asset criticality, and regulatory requirements.
• Operate ASM capabilities including asset discovery and remediation tracking.
• Monitor remediation activities and escalate overdue or high-risk issues.
• Develop and optimize security posture dashboards, KPIs, and executive reports.
• Collaborate with Security Operations, Cloud Engineering, Infrastructure, Risk, and Architecture teams to improve security posture.
• Identify opportunities to automate posture management with security platforms and ITSM systems.
• Contribute to evaluation and onboarding of CSPM and ASM capabilities.

Skills

Analytical thinking

Problem-solving

Communication

Stakeholder management

Education

Bachelor's degree in Cyber Security, Information Security, Computer Science, IT, or related field

Tools

Microsoft Defender CSPM

Qualys TotalCloud

Job description

The Security Posture Management Specialist is responsible for operating and continuously improving the organization's Security Posture Management capability across cloud and enterprise environments. The role focuses on Cloud Security Posture Management (CSPM), Attack Surface Management (ASM), remediation governance, and security posture reporting to ensure security risks are accurately identified, prioritized, assigned, tracked, and monitored.

Key Responsibilities

• Operate and continuously improve the organization's Cloud Security Posture Management (CSPM) capability across Azure and AWS by monitoring security configurations, identifying misconfigurations, and managing security findings.
• Perform risk-based prioritization of security findings by considering business criticality, exploitability, asset exposure, regulatory requirements, and threat intelligence to ensure remediation efforts focus on the highest risks.
• Operate and enhance Attack Surface Management (ASM) capabilities, including asset discovery, internet-facing exposure identification, shadow IT visibility, attack path analysis, and remediation tracking.
• Monitor remediation activities, escalating overdue or high-risk issues through established governance processes.
• Develop, maintain, and continuously improve security posture dashboards, KPIs, metrics, and executive reporting to provide visibility into cyber risk, remediation progress, and overall program effectiveness.
• Collaborate with Security Operations, Cloud Engineering, Infrastructure, Risk, Architecture, and Application teams to improve the organization's overall security posture and promote accountability for remediation activities.
• Identify opportunities to automate posture management processes through integration with security platforms, CMDB, IT Service Management (ITSM), and reporting solutions.
• Contribute to the evaluation, onboarding, tuning, and continuous optimization of CSPM and ASM capabilities to improve detection quality and reduce operational overhead.

Required Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related field.
• Minimum 3 years of experience in Cyber Security, Cloud Security, Vulnerability Management, Security Operations, or a related discipline.
• Hands-on experience with Cloud Security Posture Management (CSPM) solutions such as Microsoft Defender CSPM, Qualys TotalCloud, or equivalent platforms.
• Experience working with public cloud environments, including Azure and AWS.
• Strong understanding of cloud security risks, security misconfigurations, vulnerability management, and remediation processes.
• Experience managing security findings and driving remediation activities across multiple technical stakeholders.
• Experience developing security metrics, dashboards, and executive-level reporting.
• Working knowledge of security frameworks and standards such as CIS Benchmarks, NIST CSF, and NIST 800-53.
• Excellent analytical, problem-solving, communication, and stakeholder management skills.
• Experience with IT Service Management platforms such as ServiceNow is desirable.
• Relevant security certifications (e.g., AZ-500, SC-200, SC-100, CCSK, CCSP) are considered an advantage.