Unit Manager - Information Security
Bajaj Finance · Banking & Financial Services
- Pune, Maharashtra, India
- On-site
- Posted yesterday
- Cybersecurity
About the job
Job Purpose
Information security team member who is proficient in maintaining & managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.
Duties and Responsibilities
A- Minimum required Accountabilities for this role
Role: A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert & risks.
Key Responsibilities:
Security Posture Monitoring:
? Implement and manage SIEM & CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint).
? Continuously assess cloud configurations for security risks and compliance violations.
? Monitor for drift from secure baselines and enforce remediation workflows.
Risk Identification & Remediation:
? Detect misconfigurations, excessive permissions, and insecure storage or networking setups.
? Collaborate with cloud engineering and DevOps teams to remediate findings.
? Prioritize risks based on impact and likelihood.
Incident Response & Forensics:
? Investigate alerts and anomalies flagged by CSPM tools.
? Support cloud incident response and post-mortem analysis.
? Maintain logs and evidence for forensic investigations.
Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
B- Additional Accountabilities pertaining to the role
? Manage & maintain security tool Microsoft Sentinel & Palo Alto Prisma
? Maintain compliance as per organization compliance policy
? Highlight risk & mitigation plan
? Work with SOC team to investigate security alerts and improve detection rules.
? Document security policies, configurations, and incident reports.
? Risk analysis and mitigation
? Vendor Co-ordination
? Strong troubleshooting, analytical, and communication skills
? Energetic, self-motivated and self-sufficient in accomplishing tasks.
? Good analytical and problem solving skills.
Key Decisions / Dimensions
• Identification of right contacts to channelise the issue/problem for closure.
• Review the alert/incident and categorised True positive / False positive and take require steps.
• Discuss observation response as applicable & improve security controls.
• Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.|Potential regulatory actions due to non-compliances
Major Challenges
• Handling of fast changing environment with variety of cloud service providers
• Handling of compliance expectations in stringent timelines
• Handling multiple stakeholders at a time
• Coordination with third party consultants who assist in auditing and compliance initiatives
Required Qualifications and Experience
a) Qualifications
Minimum 6+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
Minimum 6+ years in Information / Cyber / application security.
b) Work Experience
• Knowledge & hands-on experience on CSPM & CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
• Experience in Project management.
• Positive attitude, Hard Worker and team player
• Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage