Cloud Security Posture Management Lead Engineer

Job Description

Job Description – Cloud Security Posture Management (CSPM) Lead
IT / Cybersecurity
Full-time

1. Job Overview
Detail Information
Company Guidehouse India
Position Cloud Security Posture Management (CSPM) Lead
Job Family IT Cyber Security
Location India – Chennai / Trivandrum / Gurugram locations mentioned
Employment Type Full-time
Experience Not specified
Work Mode Not specified
Travel Requirement None
Security Clearance Not required
Salary Not disclosed
Application Email IndiaRecruiting@guidehouse.com

2. About the Company
Guidehouse is a global professional services firm providing advisory, technology and managed services to commercial and public-sector clients.

Guidehouse India operates across Chennai, Trivandrum and Gurugram, offering opportunities in technology, consulting and professional services.
3. Job Summary
Guidehouse India is looking for a Cloud Security Posture Management (CSPM) Lead to strengthen and manage the security posture of its cloud environments across Microsoft Azure and Amazon Web Services (AWS).

The role focuses on implementing, optimising and operationalising cloud security capabilities using Wiz and related security technologies.

The selected candidate will lead cloud risk identification, vulnerability management, security configuration, remediation automation and compliance activities while collaborating with cloud engineering, DevOps, IAM, SOC and other security teams.
4. Key Responsibilities
A. Cloud Security & CSPM Operations
– Lead CSPM operations across Microsoft Azure and AWS.
– Manage cloud security posture, configurations, identities, vulnerabilities and exposure risks.
– Implement and maintain secure cloud configurations.
– Identify cloud misconfigurations, vulnerabilities, exposed services and excessive permissions.
– Prioritise cloud security risks and drive remediation activities.
– Improve cloud security posture using Wiz and related technologies.
B. Security Compliance & Risk Management
– Establish cloud security configurations aligned with CIS, NIST, ISO 27001 and organisational standards.
– Monitor cloud security compliance and control effectiveness.
– Conduct cloud security architecture reviews and threat modelling.
– Support data protection and cloud security investigations.
– Identify recurring security issues and recommend preventive measures.
C. Automation & DevSecOps
– Develop security policies and automation to reduce manual remediation.
– Improve security response times and eliminate recurring cloud security issues.
– Integrate Wiz findings with SIEM/SOC platforms, vulnerability management systems, ticketing tools and incident response processes.
– Collaborate with DevOps and Cloud Engineering teams to strengthen security practices.
D. Collaboration & Incident Response
– Work closely with Cloud Engineering, DevOps, Application Security, Infrastructure, IAM, SOC, Vulnerability Management and GRC teams.
– Support cloud security incident response and investigations.
– Coordinate remediation activities across technical teams.
– Provide guidance on cloud security architecture and best practices.
E. Reporting & Team Leadership
– Develop cloud security metrics and executive reports.
– Track cloud risk, remediation trends and security posture improvements.
– Measure control effectiveness and operational performance.
– Mentor engineers and security analysts.
– Establish repeatable cloud security engineering practices.
5. Required Technical Skills
Skill Area Required Skills
Cloud Platforms Microsoft Azure, Amazon Web Services (AWS)
Cloud Security Azure security, AWS security and architecture
CSPM Cloud security posture management
Vulnerability Management Cloud vulnerability and exposure management
Cloud Monitoring Cloud logging, monitoring and security visibility
Configuration Security Secure configuration and compliance
Risk Management Cloud risk identification, assessment and remediation
Automation Cloud security automation and remediation
Architecture Cloud security architecture

6. Preferred / Additional Skills
The following skills are desirable but are not listed as mandatory requirements:
– Wiz / CNAPP / CSPM security platforms.
– Cloud Identity and Access Management (IAM).
– Least-privilege access management.
– Infrastructure as Code (IaC) security.
– Terraform and AWS CloudFormation.
– CI/CD pipeline security.
– DevSecOps practices.
– Container and Kubernetes security.
– MITRE ATT&CK framework.
– Cloud threat modelling.
– Python and PowerShell scripting.
– CIS Benchmarks.
– NIST Cybersecurity Framework (CSF).
– ISO 27001 compliance.
7. Experience & Candidate Profile
– The job advertisement does not specify a minimum number of years of experience.
– Candidates should have strong knowledge of AWS and Azure cloud security.
– Practical experience in cloud vulnerability and exposure management is important.
– Ability to identify cloud security risks and coordinate remediation.
– Understanding of cloud logging, monitoring and compliance.
– Experience in security automation and cloud security architecture.
– Strong collaboration and stakeholder management skills.
– Ability to mentor engineers and security analysts.
8. Salary & Benefits
Salary: Not disclosed. Competitive compensation is offered as part of the company’s benefits package.

Benefits mentioned include:
– In-house physician consultations.
– Nutritious food options at the workplace.
– Confidential counselling through the Employee Assistance Program (EAP).
– Learning and development programmes.
– Continuous upskilling opportunities.
– Comprehensive employee wellbeing support.
9. Application Details
Guidehouse India – Recruitment Team
IndiaRecruiting@guidehouse.com

Copy
Website: Guidehouse India

Official recruitment communications should come from email addresses ending in @guidehouse.com or @myworkday.com.

10. Ideal Candidate Profile at a Glance
– Position: CSPM Lead
– Company: Guidehouse India
– Domain: Cloud Security / Cybersecurity
– Cloud Platforms: AWS and Microsoft Azure
– Core Skills: Cloud security, CSPM, vulnerability management, security configuration and automation
– Preferred Tools: Wiz, Terraform, CloudFormation
– Additional Skills: DevSecOps, IAM, Kubernetes, Python, PowerShell
– Compliance: CIS, NIST, ISO 27001
– Experience: Not specified
– Location: India – Chennai, Trivandrum or Gurugram locations mentioned
– Employment: Full-time
11. Recruitment Notes & Clarifications
1. Experience is not specified: The employer should confirm the minimum experience expected for a Lead-level position.
2. Location needs confirmation: Chennai, Trivandrum and Gurugram are mentioned as Guidehouse India locations, but the exact location for this vacancy is not confirmed.
3. Work arrangement is unclear: Remote, hybrid or office-based attendance is not specified.
4. Wiz / CNAPP / CSPM platform experience is preferred, while AWS and Azure security expertise is required.
5. Terraform, CloudFormation, Kubernetes, Python, PowerShell and DevSecOps are desirable additional skills.
6. Salary and interview process are not disclosed.
7. No travel or security clearance is required.