Senior Cybersecurity Specialist

Sapiens; Bengaluru; On-site; INR 700,000 - 1,200,000; Full time

Job summary

Sapiens International is seeking a Senior Cybersecurity Operations Specialist to join our global IT Security team in India. The role focuses on vulnerability management and cloud security across Azure, AWS, GCP, and OCI, including container and Kubernetes environments.

You will own end-to-end lifecycle, implement automation, and collaborate with DevOps for secure releases. Ideal candidates have 5+ years in cybersecurity, hands-on experience with CSPM/CNAPP/CWP, and strong scripting skills in

Qualifications

• 5+ years in cybersecurity with hands-on vulnerability management and cloud security
• Proven end-to-end vulnerability lifecycle ownership
• Experience securing cloud, container, and Kubernetes with CSPM/CNAPP/CWP
• Automation using Python, APIs, or scripting
• Exposure to DNS security, CrowdStrike Falcon, Purview, DLP, or email protection

Responsibilities

• Own end-to-end vulnerability management lifecycle: discovery, scanning, prioritization, ticketing, remediation tracking
• Build AI-assisted automation pipelines to accelerate remediation and surface risk insights
• Develop integrations between security tools and ITSM platforms using Python and REST APIs
• Maintain dashboards and automated reporting for vulnerability posture and compliance KPIs
• Manage end-to-end security for cloud VMs, Kubernetes, and container workloads across cloud accounts

Skills

Vulnerability management

Cloud security

Python scripting

REST APIs

Automation

Tools

CrowdStrike Falcon

Microsoft Purview

DNS security

DLP

Email protection

Job description

Senior Cybersecurity Operations Specialist SAPIENS INTERNATIONAL Security Specialist IT – Cybersecurity Operations | Cybersecurity Specialist | Full-Time | India

ABOUT THE ROLE

Sapiens International is looking for a Security Specialist (Cybersecurity Specialist) to join our global IT Security team. This is a hands-on role for someone who wants to specialize in vulnerability management and cloud security — owning the end-to-end vulnerability lifecycle and the security of our cloud, container, and Kubernetes environments. Familiarity with the other tools in our security stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Microsoft Purview, DLP, and email protection — is an added advantage, but the core of this role is hands-on, specialized ownership of vulnerability management and cloud security.

KEY RESPONSIBILITIES

• Vulnerability Management & Automation:
  • Own the end-to‑end vulnerability management lifecycle: asset discovery, scan orchestration, CVSS‑based prioritization, ticketing, SLA tracking, and remediation validation
  • Build AI‑assisted automation pipelines that replace manual reporting, accelerate remediation, and surface actionable risk insights for stakeholders
  • Develop integrations between security tools and ITSM platforms using Python, REST APIs, and scripting
  • Maintain dashboards and automated reporting for vulnerability posture and compliance KPIs
• Cloud Security:
  • Manage end-to‑end security for cloud VMs, Kubernetes, and containerised workloads — ensuring secure configuration, runtime protection, and access controls across the infrastructure
  • Manage and operate CSPM, CNAPP, and CWP platforms across cloud accounts — policy configuration, findings triage, SLA-driven closure, and compliance posture tracking against CIS, NIST, or PCI‑DSS benchmarks
  • Manage container image security and registry operations — image scanning in CI/CD and runtime, access controls, and audit logs, partnering with developers and DevOps teams to drive remediation without blocking releases
  • Manage Kubernetes and cloud misconfiguration findings and translate them into actionable remediation tasks for platform and application teams
  • Drive Azure, AWS, GCP, OCI security hardening in line with CIS, NIST, or equivalent frameworks
  • Conduct security architecture reviews for new cloud workloads and projects
  • Implement and manage modern authentication frameworks: cloud IDP, SSO, MFA, and Zero Trust principles

Other Security Tools & Projects (Added Advantage)

• Support administration of other tools in our stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, and email protection/mail relay — as needed
• Work on additional security tool implementation, upgrades, and improvement projects assigned by the manager
• Partner with other IT and security teams to roll out new controls and policies
• Document standard operating procedures and runbooks for the tools you own

REQUIREMENTS

• Experience 5+ years of experience in the cybersecurity field, with specialized, hands‑on experience in vulnerability management and cloud security
• Proven experience owning the end-to‑end vulnerability management lifecycle, from discovery through remediation
• Proven experience securing cloud, container, and Kubernetes environments, including CSPM, CNAPP, and CWP tools and compliance posture tracking
• Experience building security automation using Python, APIs, or scripting is a strong plus
• Exposure to other tools such as DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, or email protection is an added advantage

Technical — Must Have (Vulnerability Management)

• CVSS‑based vulnerability prioritization, scan orchestration, and remediation validation
• Building automation and integrations between security tools and ITSM platforms using Python and REST APIs
• Maintaining dashboards and automated reporting for vulnerability posture and compliance KPIs

Technical — Must Have (Cloud Security)

• Hands‑on experience with CSPM, CNAPP, and CWP platforms
• Securing cloud VMs, Kubernetes, and containerised workloads — configuration, runtime protection, and access controls
• Container image security and CI/CD scanning
• Cloud IDP, SSO, MFA, and Zero Trust principles
• Azure, AWS, GCP, or OCI security hardening (CIS, NIST, or equivalent frameworks)
• Security architecture reviews for cloud workloads

Soft Skills & Language

• Fluent written and verbal English
• Perceptive, fast learner with a strong sense of urgency
• Able to multi‑task, and remain organized in a fast‑paced global environment
• Highly independent and proactive, with a team‑first mindset

Advantage (Not Required)

• Hands‑on exposure to DNS security
• Hands‑on exposure to the CrowdStrike Falcon platform (EDR, Identity Protection, Exposure Management)
• Familiarity with Microsoft Purview, DLP, or email protection/mail relay
• Security‑related certifications: CISSP, CISM, CEH, CompTIA Security+, or vendor‑specific (CrowdStrike, Microsoft, etc.)

Experience Level

Senior Level