Unit Manager /Senior Unit Manager - Information Security

Bajaj Finserv Limited; Pune District; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Bajaj Finserv Limited is seeking an Information Security specialist to secure cloud environments (AWS, Azure, GCP), containers, and CI/CD pipelines. The role focuses on CSPM, IAM, and incident response within a dynamic tech stack.

The candidate will monitor security posture, enforce compliance, and collaborate with cloud engineering and DevOps teams to remediate findings and improve detection rules across the organization.

Qualifications

• Minimum 3+ years of experience in Cloud Security Posture management and Cloud workload protection (CSPM, CWP).
• Minimum 3+ years in Information / Cyber / application security.

Responsibilities

• Monitor and improve the security posture of cloud environments (AWS, Azure, GCP).
• Identify misconfigurations, enforce compliance, and mitigate alert risks.
• Manage CSPM tools such as Prisma Cloud and Microsoft Defender for Cloud/Endpoint.
• Collaborate with cloud engineering and DevOps to remediate findings and enforce baselines.
• Investigate alerts and perform forensics for security incidents.

Skills

Cloud Security

CSPM

CWP

SIEM

Azure Security

Tools

Palo Alto Prisma Cloud

Microsoft Sentinel

AV/EDR

Vulnerability Mgmt

Job description

Job Purpose

Information security team member who is proficient in maintaining managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.

Duties and Responsibilities

• A- Minimum required Accountabilities for this role Role: A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert risks.
• Key Responsibilities: Security Posture Monitoring: Implement and manage SIEM CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint).
• Continuously assess cloud configurations for security risks and compliance violations.
• Monitor for drift from secure baselines and enforce remediation workflows.
• Risk Identification Remediation: Detect misconfigurations, excessive permissions, and insecure storage or networking setups.
• Collaborate with cloud engineering and DevOps teams to remediate findings.
• Prioritize risks based on impact and likelihood.
• Incident Response Forensics: Investigate alerts and anomalies flagged by CSPM tools.
• Support cloud incident response and post-mortem analysis.
• Maintain logs and evidence for forensic investigations.
• Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
• B- Additional Accountabilities pertaining to the role
• Manage maintain security tool Microsoft Sentinel Palo Alto Prisma
• Maintain compliance as per organization compliance policy
• Highlight risk mitigation plan
• Work with SOC team to investigate security alerts and improve detection rules.
• Document security policies, configurations, and incident reports.
• Risk analysis and mitigation
• Vendor Co-ordination
• Strong troubleshooting, analytical, and communication skills
• Energetic, self-motivated and self-sufficient in accomplishing tasks.
• Good analytical and problem solving skills.

Key Decisions / Dimensions

• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take require steps.
• Discuss observation response as applicable improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.
• Potential regulatory actions due to non-compliances.

Major Challenges

• Handling of fast changing environment with variety of cloud service providers
• Handling of compliance expectations in stringent timelines
• Handling multiple stakeholders at a time
• Coordination with third party consultants who assist in auditing and compliance initiatives

Required Qualifications and Experience

a) Qualifications

• Minimum 3+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
• Minimum 3+ years in Information / Cyber / application security.

b) Work Experience

• Knowledge hands-on experience on CSPM CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
• Experience in Project management.
• Positive attitude, Hard Worker and team player
• Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage