Security Solution Architect

NEXTHIRE; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

NEXTHIRE is seeking a Cloud Security Architecture and Endpoint Protection professional in Mumbai to design secure cloud architectures across AWS/Azure, implement security controls, and perform posture reviews against CIS, ISO 27001, and NIST.

You will oversee CSPM/CWPP/CNAPP deployments and coordinate incident response activities, while ensuring endpoint hardening and compliance across Windows and Linux environments.

Qualifications

• Experience with cloud security concepts across AWS, Azure, or similar platforms.
• Knowledge of endpoint security tools such as EDR, XDR, antivirus, device control, encryption, and patch management.
• Familiarity with vulnerability assessment, patch management, secure configuration, and security hardening.
• Understanding Windows and Linux endpoint/server security.
• Good documentation and reporting skills.
• Ability to coordinate with multiple teams and drive remediation activities.
• Experience in BFSI, NBFC, banking, financial services, or regulated environments will be preferred.

Responsibilities

• Review and design secure cloud architecture for workloads hosted on AWS, Azure, or other cloud platforms.
• Implement and monitor cloud security controls related to IAM, network security, encryption, logging, backup, workload protection, and secure configuration.
• Perform cloud security posture reviews against benchmarks such as CIS, ISO 27001, NIST, and regulatory requirements.
• Review security of cloud services such as compute, storage, databases, Kubernetes, serverless, and SaaS integrations.
• Support implementation of CSPM, CWPP, CNAPP, cloud workload protection, and cloud vulnerability management solutions.
• Ensure secure configuration of cloud accounts, VPC/VNet, security groups, route tables, firewalls, WAF, KMS, storage buckets, and privileged access.
• Monitor cloud security alerts and coordinate remediation with relevant teams.
• Support cloud incident response, log review, threat investigation, and root cause analysis.
• Design, implement, and manage endpoint security controls across laptops, desktops, servers, and mobile devices.
• Support deployment and management of EDR/XDR, antivirus, device control, host firewall, disk encryption, patching, and vulnerability remediation.
• Define endpoint hardening baselines for Windows, Linux, and server environments.
• Review endpoint compliance status, malware alerts, suspicious activities, unauthorized software, and policy violations.
• Coordinate with IT teams for patch management, endpoint hygiene, asset visibility, and secure configuration enforcement.
• Support endpoint incident response, malware analysis coordination, containment, and recovery activities.
• Review endpoint logs and integrate endpoint security alerts with SIEM/SOC platforms.

Skills

Cloud security concepts

EDR/XDR tools

Vulnerability assessment

Windows/Linux security

Documentation & reporting

Coordination across teams

BFSI/regulatory experience

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

EDR/XDR suites

SIEM/SOC platforms

Vulnerability management tools

Cloud platforms (AWS/Azure)

Job description

Key Responsibilities

• Review and design secure cloud architecture for workloads hosted on AWS, Azure, or other cloud platforms.
• Implement and monitor cloud security controls related to IAM, network security, encryption, logging, backup, workload protection, and secure configuration.
• Perform cloud security posture reviews against benchmarks such as CIS, ISO 27001, NIST, and regulatory requirements.
• Review security of cloud services such as compute, storage, databases, Kubernetes, serverless, and SaaS integrations.
• Support implementation of CSPM, CWPP, CNAPP, cloud workload protection, and cloud vulnerability management solutions.
• Ensure secure configuration of cloud accounts, VPC/VNet, security groups, route tables, firewalls, WAF, KMS, storage buckets, and privileged access.
• Monitor cloud security alerts and coordinate remediation with relevant teams.
• Support cloud incident response, log review, threat investigation, and root cause analysis.
• Design, implement, and manage endpoint security controls across laptops, desktops, servers, and mobile devices.
• Support deployment and management of EDR/XDR, antivirus, device control, host firewall, disk encryption, patching, and vulnerability remediation.
• Define endpoint hardening baselines for Windows, Linux, and server environments.
• Review endpoint compliance status, malware alerts, suspicious activities, unauthorized software, and policy violations.
• Coordinate with IT teams for patch management, endpoint hygiene, asset visibility, and secure configuration enforcement.
• Support endpoint incident response, malware analysis coordination, containment, and recovery activities.
• Review endpoint logs and integrate endpoint security alerts with SIEM/SOC platforms.

Required Skills

• Good understanding of cloud security concepts across AWS, Azure, or similar platforms.
• Knowledge of endpoint security tools such as EDR, XDR, antivirus, device control, encryption, and patch management.
• Familiarity with vulnerability assessment, patch management, secure configuration, and security hardening.
• Understanding Windows and Linux endpoint/server security.
• Good documentation and reporting skills.
• Ability to coordinate with multiple teams and drive remediation activities.
• Experience in BFSI, NBFC, banking, financial services, or regulated environments will be preferred.

Educational Qualification

Bachelor’s degree in computer science, Information Technology, Cyber Security, or related field.