Description

• Design, implement, and maintain cloud security architectures across AWS and Azure environments.
• Configure and manage AWS GuardDuty for continuous threat detection, anomaly monitoring, incident investigation, and security event triage.
• Administer Microsoft Defender for Cloud (Azure Security Center) including policy management, compliance monitoring, secure score improvement, recommendations, and alert response.
• Manage AWS Security Hub to aggregate, prioritize, investigate, and remediate security findings across multi-account cloud environments.
• Utilize AWS Config for resource compliance monitoring, configuration drift detection, governance assessments, and automated remediation.
• Manage AWS CloudTrail logging, audit monitoring, forensic investigations, security reviews, and compliance reporting activities.
• Implement cloud security baselines, hardening standards, and security controls for enterprise cloud workloads.
• Support cloud security monitoring, incident response, threat detection, and vulnerability management activities.

Security Governance & Compliance

• Define, implement, and enforce cloud security governance policies aligned with industry standards and regulatory requirements.
• Conduct cloud security risk assessments, architecture reviews, gap assessments, and security evaluations.
• Prepare governance reports, compliance dashboards, risk summaries, and executive-level security reporting.
• Drive continuous compliance initiatives across AWS and Azure cloud estates.
• Support internal audits, external audits, and regulatory assessments through evidence collection and remediation tracking.
• Collaborate with architecture, infrastructure, development, and delivery teams to embed security-by-design principles into cloud solutions.
• Maintain cloud security standards, policies, procedures, and exception management processes.
• Provide governance oversight for cloud security posture management initiatives.

Cloud Security Tool Administration

• Manage AWS IAM, Service Control Policies (SCPs), and identity governance controls.
• Support Azure AD / Microsoft Entra ID administration and access governance.
• Manage Azure Policy, Azure Blueprints, and compliance automation initiatives.
• Administer Azure Sentinel (Microsoft Sentinel) for security monitoring and incident investigations.
• Support AWS Inspector vulnerability scanning and remediation programs.
• Manage Azure Key Vault and cloud secrets management solutions.
• Monitor Cloud Security Posture Management (CSPM) platforms and recommend improvements.

Qualifications:

• Experience: 5–10 Years

Required Technical Skills

AWS Security Technologies

• AWS GuardDuty.
• AWS Security Hub.
• AWS Config.
• AWS CloudTrail.
• AWS Identity and Access Management (IAM).
• AWS Service Control Policies (SCPs).
• AWS Inspector.

Azure Security Technologies

• Microsoft Defender for Cloud (Azure Security Center).
• Azure Policy.
• Azure Blueprints.
• Microsoft Sentinel (Azure Sentinel).
• Microsoft Entra ID (Azure Active Directory).
• Azure Key Vault.

Security Governance Knowledge

• Strong expertise in ISO 27001, NIST Cybersecurity Framework (CSF), CIS Cloud Benchmarks, and SOC 2 Type II.
• Experience authoring and maintaining security policies, standards, governance frameworks, and exception processes.
• Hands-on experience with Cloud Security Posture Management (CSPM) tools and reporting.
• Strong understanding of Governance, Risk, and Compliance (GRC) processes and platforms.
• Knowledge of data residency, data classification, privacy requirements, GDPR, NIS2, and cross-border data transfer regulations.
• Experience supporting audits, compliance assessments, security reviews, and governance programs.

Additional Skills

• Cloud Security Architecture.
• Threat Detection and Incident Response.
• Cloud Risk Management.
• Security Operations.
• Compliance Monitoring.
• Vulnerability Management.
• Security Governance and Reporting.
• Cloud Security Posture Management (CSPM).
• Security Baseline Configuration and Hardening.
• Executive Stakeholder Communication.

Educational Qualifications

• Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.

Preferred Certifications

• AWS Certified Security – Specialty.
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• Certified Cloud Security Professional (CCSP).
• CISSP.
• CISM.
• CompTIA Security+.
• Hands-on cloud security implementation portfolio or lab experience is highly desirable

Key Skills

Education

Bachelor's degree