Information Security Analyst II

Lessonly; Hyderabad City Taluka; In loco; PKR 24.882.000 - 41.471.000; Tempo pieno

Descrizione del lavoro

Lessonly is seeking a Cloud Analyst to secure our cloud footprint across multiple providers and delivery stacks, strengthening monitoring, automated controls, and threat protection. You will help measure implementations against benchmarks and partner with product engineering to reduce toil.

Responsibilities include enforcing least-privilege, tuning WAFs, applying CIS Benchmarks, and building scripts to automate alert triage and remediation across cloud environments.

Competenze

• 4+ years of hands-on experience in Cloud Security, DevSecOps, or Infrastructure Security.
• Capable of managing cloud posture, reviewing CIS Benchmarks, and working with security logging/SIEM solutions.
• Hands-on experience configuring and tuning WAF policies and rules (e.g. Cloudflare WAF, AWS WAF).
• Experience with Infrastructure as Code (e.g. Terraform) for audit and remediation.
• Proficiency in Python, Bash, or similar language for fetching telemetry, interacting with cloud APIs, and automating security tasks.
• Experienced with least-privilege principles, service accounts, API key lifecycles, and machine-to-machine authentication.

Mansioni

• Identity & Agentic AI Security: Enforce identity, access, and privilege boundaries for automated agents, service accounts, and API integrations interacting with cloud infrastructure.
• Cloud Infrastructure Monitoring: Build, tune, and maintain security monitoring across Cloudflare WAF, CSPM, and cloud-focused SIEM logs, reducing alerts and improving remediation times.
• Hardening & Compliance: Conduct CIS Benchmark audits across cloud environments and remediate posture drift.
• Automation & Scripting: Write clean scripts (Python, Bash) to automate alert triage and remediation across security tooling.
• Cloud Security Operations & Escalation: Own escalation paths for cloud security alerts and participate in incident reviews.
• Cross-Functional Collaboration: Work with Cloud Security Engineering and Cloud Operations to align security objectives.
• Culture & Global Alignment: Engage with a global security team for mentorship and collaboration.

Conoscenze

Cloud Security

DevSecOps

Security Monitoring

WAF configuration

Terraform

Python

Bash

Least privilege

Service accounts

API key lifecycles

M2M authentication

Strumenti

GCP

OCI

Workato

Tines

Threat intelligence

Descrizione del lavoro

As a Cloud Analyst supporting the Seismic product suite, you will help us secure our cloud footprint across five cloud providers and a wide array of delivery stacks. You will help us strengthen our monitoring capabilities, develop common controls across all systems, measure implementations against industry benchmarks, and help us to protect our customers against emerging threats – including agentic AI risk. Sitting at the intersection of security operations and cloud platform engineering, you will build automated controls, triage alerts, address toil, and partner with our product engineering team to solve problems.

• 4+ years of hands-on experience in Cloud Security, DevSecOps, or Infrastructure Security.
• Capable of managing cloud posture , reviewing CIS Benchmarks, and working with security logging/SIEM solutions.
• Hands‑on experience configuring and tuning WAF policies and rules (e.g. Cloudflare WAF, AWS WAF).
• Experience with Infrastructure as Code (e.g. Terraform) for audit and remediation.
• Proficiency in Python, Bash, or similar language for fetching telemetry, interacting with cloud APIs, and automating security tasks.
• Experienced with least-privilege principles, service accounts, API key lifecycles, and machine-to-machine authentication.

Nice to Have (Optional)

• Experience with GCP, OCI, or posture management.
• Experience with SOAR platforms and automated security workflows (e.g. Workato, Tines).
• Knowledge of detection engineering fundamentals, rule authoring, and threat intelligence.
• Exposure to security AI/ML workloads, agentic AI frameworks, non-human identity management, or automated API integrations.
• Relevant industry certifications (e.g. AWS Certified Security, Azure Security Engineer Associate, Security+, CCSP or other relevant specialty certifications).

• Identity & Agentic AI Security Enforce identity, access, and privilege boundaries for automated agents, service accounts, and API integrations interacting with cloud infrastructure.
• Cloud Infrastructure Monitoring Build, tune, and maintain security monitoring across our Cloudflare Web Application Firewall (WAF), Cloud Security Posture Management (CSPM), and cloud-focused SIEM logs. Work to reduce alerts, improve remediation times, and create runbooks for standardized responses.
• Hardening & Compliance: Conduct regular CIS Benchmark audits across cloud environments, identify posture drift, and collaborate with teams to remediate findings.
• Automation & Scripting: Write clean scripts (AI skills, Python, Bash, etc.) to automate alert triage, remediate misconfigurations, and integrate security tooling into existing workflows.
• Cloud Security Operations & Escalation: Own escalation paths for cloud security alerts, participate in incident investigation, root-cause analysis, and post-incident documentation.
• Cross-Functional Collaboration: Collaborate with Cloud Security Engineering and Cloud Operations to advance shared security objectives through clear ownership, effective prioritization, transparent ticketing, and timely resolution.
• Culture & Global Alignment: Gain experience and mentorship from seasoned security professionals and contribute to a growing and collaborative global security team.

At Seismic, we’re committed to providing benefits and perks for the whole self. To explore our benefits available in each country, please visit the Global Benefits page.

If you are an individual with a disability and would like to request a reasonable accommodation as part of the application or recruiting process, please click here.

Seismic is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to gender, age, race, religion, or any other classification which is protected by applicable law.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.