Cloud Security Posture Management Lead Engineer

Job Description

Job Description – Cloud Security Posture Management (CSPM) Lead
Lead-Level Position
Full-time

1. Job Overview
Particulars Details
Company Guidehouse India
Job Title Cloud Security Posture Management (CSPM) Lead
Job Family IT Cyber Security
Location Not specified in the individual vacancy details
Employment Type Full-time
Experience Not specified
Travel Requirement None
Security Clearance Not required
Cloud Platforms Microsoft Azure, AWS
Primary Security Tool Wiz
Salary Not disclosed
Work Mode Not specified

2. About the Company
Guidehouse is a global professional services firm offering advisory, technology, and managed services to commercial and public-sector clients.

Guidehouse India operates across Chennai, Trivandrum, and Gurugram, providing opportunities in technology, consulting, and professional services.
3. Job Summary
Guidehouse India is looking for an experienced Cloud Security Posture Management (CSPM) Lead to strengthen and manage the security posture of its cloud environments across Microsoft Azure and Amazon Web Services (AWS).

The role involves leading CSPM operations, implementing cloud security policies, identifying vulnerabilities and misconfigurations, managing cloud risks, and driving automated remediation using Wiz and related cloud security technologies.

The ideal candidate should have strong expertise in cloud security architecture, vulnerability management, identity and access management, security compliance, and cloud security automation.
4. Key Responsibilities
Cloud Security Posture Management
– Lead CSPM operations across Microsoft Azure and AWS environments.
– Monitor cloud security posture, configurations, identities, vulnerabilities, and exposure risks.
– Implement and optimize cloud security capabilities using Wiz and related technologies.
– Identify cloud misconfigurations, excessive permissions, exposed services, and security vulnerabilities.
– Prioritize security findings and drive measurable risk reduction.
Security Compliance and Governance
– Establish and maintain secure cloud configurations aligned with:
– CIS Benchmarks
– NIST Standards
– ISO 27001
– Organizational security policies.
– Ensure cloud environments comply with information security requirements.
– Support security architecture reviews and cloud threat modelling.
– Implement cloud security controls and access management policies.
Vulnerability and Risk Management
– Identify, evaluate, and prioritize cloud vulnerabilities and exposures.
– Manage excessive permissions and toxic-risk combinations.
– Coordinate remediation activities with relevant engineering and security teams.
– Monitor security risks and prevent recurring cloud configuration issues.
– Support cloud security investigations and incident response activities.
Security Automation and DevSecOps
– Develop automation policies to reduce manual remediation.
– Improve cloud security response times through automated workflows.
– Integrate Wiz findings with SIEM/SOC, vulnerability management, ticketing, and incident response systems.
– Support Infrastructure as Code (IaC) security practices.
– Improve cloud security through DevSecOps processes and continuous monitoring.
Cloud Security Architecture
– Support security architecture reviews for AWS and Azure.
– Review cloud infrastructure configurations and security controls.
– Implement cloud logging, monitoring, and data protection measures.
– Support identity and access management and least-privilege principles.
Reporting and Technical Leadership
– Develop cloud security metrics and KPI reports.
– Prepare executive-level security reports.
– Track remediation trends and control effectiveness.
– Communicate cloud risk and security posture improvements to stakeholders.
– Mentor engineers and security analysts.
– Establish repeatable cloud security engineering practices.
5. Required Technical Skills
Skill Area Required Technologies / Knowledge
Cloud Platforms Microsoft Azure, AWS
Cloud Security Cloud Security Architecture, CSPM
Security Platform Wiz – preferred / related CSPM tools
Vulnerability Management Cloud Vulnerability and Exposure Management
Cloud Monitoring Cloud Logging, Monitoring, Security Posture Monitoring
Security Configuration Secure Configuration and Compliance
Identity Management Cloud IAM, Access Controls, Least Privilege
Security Automation Automated Remediation, Cloud Security Automation
Compliance CIS Benchmarks, NIST CSF, ISO 27001
DevSecOps CI/CD and Security Integration
Infrastructure as Code Terraform, AWS CloudFormation
Scripting Python, PowerShell
Threat Management Cloud Threat Modelling, MITRE ATT&CK
Container Security Kubernetes / Container Security

6. Preferred / Additional Skills
Candidates with the following experience will have an advantage:
– Wiz, CNAPP, or CSPM platforms.
– Cloud Identity and Access Management (IAM).
– Least-privilege access implementation.
– Infrastructure as Code security.
– Terraform and CloudFormation.
– CI/CD pipeline security.
– DevSecOps practices.
– Container and Kubernetes security.
– MITRE ATT&CK framework.
– Cloud threat modelling.
– Python or PowerShell automation.
– Security incident response.
– Cloud compliance and governance.
7. Experience and Eligibility
The detailed advertisement does not specify a minimum number of years of experience.

Candidates should demonstrate relevant expertise in:
– Microsoft Azure and AWS cloud security.
– Cloud vulnerability and exposure management.
– Cloud security architecture and configuration management.
– Cloud monitoring, logging, and compliance.
– Security automation and remediation.
– Identity and access management.
– Cross-functional security risk management.
– Technical leadership and mentoring.
8. Benefits and Work Culture
Guidehouse India highlights the following employee benefits and workplace offerings:
– Competitive compensation.
– In-house physician consultations.
– Nutritious food options at the workplace.
– Confidential counselling through the Employee Assistance Program (EAP).
– Learning and development programmes.
– Professional upskilling opportunities.
– Career growth and development.
– People-first and collaborative work culture.
9. Application Details
Interested candidates can contact the Guidehouse India Recruiting team.
– Recruitment Email: IndiaRecruiting@guidehouse.com
– Company Website: Guidehouse India
– Company: Guidehouse India
Official recruitment communications should originate from email addresses ending in @guidehouse.com or @myworkday.com.
10. Candidate Profile at a Glance
Criteria Requirement
Position CSPM Lead
Company Guidehouse India
Job Category IT Cyber Security
Employment Full-time
Location Not specified in vacancy details
Experience Not specified
Primary Cloud Platforms AWS, Azure
Security Platform Wiz / CSPM
Core Expertise Cloud Security Posture Management
Security Standards CIS, NIST, ISO 27001
Automation Python, PowerShell
IaC Terraform, CloudFormation
DevSecOps CI/CD, Cloud Security Automation
Additional Security IAM, Vulnerability Management, Zero Trust
Travel None
Clearance Not required
Salary Not disclosed

11. Recruitment Notes
– Primary requirement: Strong AWS and Azure cloud security expertise.
– Core responsibility: Leading CSPM operations and improving enterprise cloud security posture.
– Wiz: Wiz/CNAPP/CSPM experience is listed as preferred, not explicitly mandatory.
– Compliance: Knowledge of CIS, NIST, and ISO 27001 is important.
– Automation: Python, PowerShell, Terraform, and CloudFormation are useful for security automation and remediation.
– Leadership: The role includes mentoring engineers and analysts, stakeholder coordination, and executive reporting.
– Experience: No minimum experience requirement is mentioned in the supplied advertisement.
– Location: Guidehouse India mentions Chennai, Trivandrum, and Gurugram as its operating locations, but the specific location for this vacancy needs confirmation.
– Salary: Not provided.