Sr Cybersecurity Engineer - SSPM and Cloud Security

Moody's Analytics; Bengaluru; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Moodys is recruiting for a cybersecurity leadership role focused on securing cloud and SaaS environments. The ideal candidate will design and operate SSPM platforms, enforce GDPR/SOC 2 compliance, and remediate non-human identity permissions.

You will build dashboards in Power BI and mentor engineering teams on best practices for cloud and SaaS security. With 5+ years in cybersecurity and hands-on AWS experience, you’ll partner with stakeholders to communicate risk and drive security

Qualifications

• Five or more years of cybersecurity experience, including at least two years in cloud security architecture or software-as-a-service security, to design and defend enterprise environments with limited supervision.
• Proven, hands-on experience implementing and managing an enterprise SaaS Security Posture Management (SSPM) platform, including security baselines, configuration drift detection, and remediation of excessive non-human identity permissions.
• Strong background in cloud security architecture and identity and access management, with hands-on experience in AWS and working knowledge of other major cloud platforms, to secure both cloud workloads and SaaS integrations.
• Proficiency in scripting and automation (Python preferred) to integrate with application programming interfaces, collect posture data, and automate security controls and remediation
• Working knowledge of Microsoft Power BI to build dashboards and reports that turn security posture data into clear metrics for technical and executive audiences
• Strong analytical, critical-thinking, and communication skills to explain risk, propose multiple mitigation options, and collaborate with technical and non-technical colleagues

Responsibilities

• Secure our cloud and software-as-a-service environments by designing controls, automating posture management, and reporting risk to leaders.
• Design, deploy, and operate the SaaS Security Posture Management platform, establishing security baselines to continuously manage configuration risks and ensure GDPR and SOC 2 compliance.
• Identify and remediate configuration drift and excessive permissions for non-human identities, including service accounts, tokens, and application integrations.
• Assess third-party SaaS applications, integrations, and open-source components for security risk before and after adoption.
• Implement anomaly detection and alerting using cloud-native and security information and event management tools.
• Develop and maintain cloud and SaaS security policies aligned with regulatory frameworks, such as GDPR and CCPA.
• Build scripts and automation, preferably in Python, to collect posture data through APIs, enforce controls, and automate remediation workflows.
• Build Power BI dashboards and reports that track posture, configuration drift, and remediation progress for security leaders and business stakeholders.
• Plan and execute changes independently, in collaboration with change and service management teams.
• Challenge existing processes, propose alternative solutions, and document and share knowledge across teams.
• Prioritize security and mentor engineering teams on cloud and SaaS security best practices

Skills

Cybersecurity

Cloud security

SaaS security

IAM

Python scripting

Power BI

Communication

Education

Bachelor's degree in CS or related

Security certifications (CISSP/CCSP/CCSK/AWS)

Job description

At Moodys, we unite the brightest minds to turn today s risks into tomorrow s opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are-with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody s is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we re advancing AI to move from insight to action-enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

Skills and Competencies

• Five or more years of cybersecurity experience, including at least two years in cloud security architecture or software-as-a-service security, to design and defend enterprise environments with limited supervision
• Proven, hands‑on experience implementing and managing an enterprise SaaS Security Posture Management (SSPM) platform, including security baselines, configuration drift detection, and remediation of excessive non‑human identity permissions
• Strong background in cloud security architecture and identity and access management, with hands‑on experience in Amazon Web Services (AWS) and working knowledge of other major cloud platforms, to secure both cloud workloads and SaaS integrations
• Proficiency in scripting and automation (Python preferred) to integrate with application programming interfaces, collect posture data, and automate security controls and remediation
• Working knowledge of Microsoft Power BI to build dashboards and reports that turn security posture data into clear metrics for technical and executive audiences
• Strong analytical, critical‑thinking, and communication skills to explain risk, propose multiple mitigation options, and collaborate with technical and non‑technical colleagues

Education

• Bachelor s degree in computer science, information security, or a related field, or equivalent practical experience.
• Security or cloud certifications, such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certificate of Cloud Security Knowledge (CCSK), or an AWS security certification preferred

Responsibilities

Secure our cloud and software-as-a-service environments by designing controls, automating posture management, and reporting risk to leaders.

• Design, deploy, and operate the SaaS Security Posture Management platform, establishing security baselines to continuously manage configuration risks and ensure GDPR and SOC 2 compliance
• Identify and remediate configuration drift and excessive permissions for non‑human identities, including service accounts, tokens, and application integrations
• Assess third‑party SaaS applications, integrations, and open‑source components for security risk before and after adoption
• Implement anomaly detection and alerting using cloud‑native and security information and event management tools
• Develop and maintain cloud and SaaS security policies aligned with regulatory frameworks, such as GDPR and the California Consumer Privacy Act (CCPA)
• Build scripts and automation, preferably in Python, to collect posture data through application programming interfaces, enforce controls, and automate remediation workflows
• Build Microsoft Power BI dashboards and reports that track posture, configuration drift, and remediation progress for security leaders and business stakeholders
• Plan and execute changes independently, in collaboration with change and service management teams
• Challenge existing processes, propose alternative solutions, and document and share knowledge across teams
• Prioritize security above other tasks and deliver work that does not require follow‑up while mentoring engineering teams on cloud and SaaS security best practices

About the team

Our Cybersecurity Engineering team is responsible for protecting Moodys cloud environments, software‑as‑a‑service applications, and data from evolving threats. We reduce risk across cloud and software‑as‑a‑service environments through continuous posture monitoring and remediation, help Moodys meet regulatory, audit, and client security expectations, and enable engineering and business teams to build and operate securely. By joining our team, you will be part of exciting work in cloud security, software‑as‑a‑service security posture management, and security automation, with opportunities to leverage and advance the responsible adoption of artificial intelligence across our cybersecurity practice.

Moodys is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity or any other characteristic protected by law.