Senior Information Security Engineer

First American; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

First American (India) is seeking a Senior Information Security Engineer to lead cloud security initiatives. You will implement and operate our CNAPP platform, onboard cloud environments, and maintain security configurations across AWS, Azure, and GCP.

Collaboration with DevOps, Application Security, and Security Operations will be essential. The role requires 7+ years in information security with strong cloud experience, proficiency with CNAPP tools, and scripting/coding for automation.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience.
• 7+ years of Information Security experience with significant hands-on cloud security.
• Hands-on experience with at least one major cloud platform: Azure, AWS, or GCP.
• Hands-on experience with CNAPP platforms such as Orca, Wiz, Defender for Cloud, or Prisma Cloud.

Responsibilities

• Implement, configure, and administer the CNAPP platform across cloud environments.
• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, and resources into CNAPP.
• Configure integrations with AWS, Azure, GCP, Kubernetes, CI/CD, identity providers, and SIEM tools.
• Maintain CNAPP policies, rules, connectors, permissions, integrations, and configurations.
• Monitor platform health, data ingestion, scanning status, and integration failures.
• Review findings related to cloud infrastructure, IAM, networking, and cloud-native services.
• Prioritize findings based on exploitability and business context; drive remediation.
• Work with engineering teams to establish secure cloud configuration baselines.

Skills

Cloud security

CNAPP platform

Automation with Python

DevSecOps

Kubernetes security

Vulnerability management

Education

Bachelor's degree in CS/Info Security

Tools

Orca Security

Wiz

Microsoft Defender for Cloud

Palo Alto Prisma Cloud

Job description

Company SummaryFirst American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies. FAI is a proud member of the FORTUNE 500 companies and has been amongst the Fortune 100 Best Companies to Work For list for eight consecutive years. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office, and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. First American (India) has been ranked amongst India's Best Companies To Work For 2023: Listed amongst the Top 100 by Great Place To Work India, FAI is also certified Best Workplaces for Women and Workplace with Inclusive Practices. Software Services helps build First American's product suite that encompasses the best in class Title Insurance, Settlement and Mortgage solutions platforms. Leverages technology product stack across Microsoft platform predominantly to develop, enhance and maintain the best in class applications. The R & D division delivers solutions for the title insurance industry leveraging the best of NLP, AI and ML.Job SummaryCloud Security - Senior Information Security EngineerAbout FAI:First American (India) is a GCC (Global Capability Center) of the First American Financial Corporation (NYSE: FAF) family of companies, a proud member of the FORTUNE 500 companies and was named one of FORTUNE’s 100 Best Companies to Work For in 2024. First American Financial Corporation provides comprehensive title insurance, closing/settlement, property data and technology solutions. First American (India) creates quality solutions for its customers by combining software, back office and knowledge processing operations to fulfill First American's business requirements. Our priorities are our employees, customers, and shareholders - in that order. FAI has been certified a Great Place to work by Great Place to work Institute, is a certified Best Workplaces for Women and Workplace with Inclusive Practices.Job Summary:The Senior Security Engineer – Cloud Security is responsible for implementing, operating, and continuously improving the organization’s Cloud-Native Application Protection Platform (CNAPP) and associated cloud security capabilities.The role will work closely with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to identify cloud security risks, improve security posture, and drive vulnerabilities and misconfigurations through remediation.The ideal candidate combines strong cloud security knowledge, CNAPP platform expertise, automation skills, and hands-on experience securing enterprise cloud environments.Responsibilities:• Implement, configure, and administer the organization's enterprise CNAPP platform across cloud environments.• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform.• Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools.• Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations.• Monitor platform health, coverage, data ingestion, scanning status, and integration failures.• Evaluate and implement new CNAPP capabilities as the organization's cloud environment and security requirements evolve.• Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services.• Work with cloud engineering teams to establish secure cloud configuration baselines.• Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services.• Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context rather than severity alone.• Work with infrastructure and application teams to drive remediation• Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and combinations of risks that create exploitable attack paths.Qualifications: (Skills, Knowledge, and Experience)Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience.7+ years of Information Security experience, with significant hands-on experience in cloud security.Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP.Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies.Strong understanding of:Cloud security architectureCloud IAM and least privilegeCloud networking and exposureVulnerability managementContainers and Kubernetes securityInfrastructure-as-Code securityCloud logging and monitoringSecurity configuration managementExperience analyzing and remediating cloud security findings.Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages.Familiarity with CI/CD pipelines and DevSecOps practices.Ability to troubleshoot complex security integrations and cloud configurations.Strong analytical, problem-solving, documentation, and communication skills.Familiarity with MITRE ATT&CK, particularly cloud-related attack techniques.Relevant certifications such as:CCSPCCSKAWS Security SpecialtyMicrosoft Azure Security EngineerGoogle Professional Cloud Security EngineerCISSP or equivalentFAI is committed to create an environment that respects, supports and inspires all individuals. We do not discriminate on the basis of color, religion, sex, gender identity, sexual orientation and age. At FAI, we celebrate diversity and believe that an inclusive workforce benefits employees, the organization and our community. We are an Equal Opportunity Employer. For more information about our company and dedication to putting People First, check out https://firstam.wd1.myworkdayjobs.com/faicareers.