CLOUD SECURITY EXPERT

Position Description.
Job Location.
Chennai Relevant experience.
7+ years • Cloud Security Experts.
• IT Backgroud in fields like Network, OS Systems, Secure communication and Programming fundamentals.
Understanding of fundamental security concepts, such as the CIA triad (Confidentiality, Integrity, Availability), least privilege, defense in depth, and threat modeling, cyber kill chain, risk management.
Knowledge of security compliance (GDPR, ISO ) • Cloud security Knowledge.
Proficiency in securing cloud environments, specifically Azure.
This includes knowledge of Azure security services like Azure Security Center, Azure Sentinel, and Azure Key Vault.
Familiarity with securing cloud resources and managing cloud identities and access control using Azure AD and role-based access control (RBAC) • Infrastructure as Code (IaC) Security.
Understanding of IaC security practices and tools to secure IaC scripts (Terraform, ARM templates, Bicep) Experience with tools like Sonar, OWASP, Wiz, or other tolls for scanning IaC for security vulnerabilities.
• DevSecOps Practices.
Knowledge of integrating security into CI/CD pipelines, including automated security testing and continuous monitoring.
Experience with security tools for CI/CD such as Advanced Security, SonarQube, or OWASP ZAP.
• Application Security.
Familiarity with secure coding practices and common vulnerabilities (e.
., OWASP Top Ten).
Experience with static application security testing (SAST) and dynamic application security testing (DAST).
• Networking and Firewall Management.
Understanding of network security principles, including firewalls, VPNs, VPC configurations, and network segmentation.
Experience with configuring and managing Azure network security groups (NSGs) and Azure Firewalls.
• Incident Response and Monitoring.
Skills in setting up and managing security monitoring and logging solutions (e.
., Azure Monitor, Azure Log Analytics).
Knowledge of incident response processes and tools for detecting and responding to security incidents.
• Automation and Scripting.
Proficiency in scripting languages (PowerShell or Python) to automate security tasks and integrate security checks into CI/CD pipelines.
Ability to write scripts for automated compliance checks and security configurations.
• Vulnerability Management.
Knowledge of vulnerability management processes, including regular scanning, assessment, and remediation of vulnerabilities.
Experience with vulnerability scanning tools • Identity and Access Management (IAM).
Understanding of IAM best practices, multi-factor authentication (MFA), and privileged access management.
Experience with Azure AD for managing identities and access controls.
• Cryptography.
Knowledge of cryptographic principles and practices, including encryption, hashing, and key management.
Experience with using Azure Key Vault for managing secrets and encryption keys.
Skills.
Analytical Thinking Public Cloud Security Security Architecture What you can expect from us.
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging.
Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life.
That’s why we call ourselves CGI Partners rather than employees.
We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value.
You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last.
You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
Come join our team—one of the largest IT and business consulting services firms in the world.