Cyber Security Analyst

Key Responsibilities:

• Architectural Security Review: Perform in-depth security reviews of solution architectures, particularly in cloud environments, to proactively identify and address potential security flaws. Partner with development teams to guide secure design decisions before and during development.
• Cloud Security Management: Implement and enforce cloud security best practices, including identity and access management, encryption, logging and monitoring, and incident response for cloud-native applications and infrastructure.
• Threat Modelling: Skilled in threat modelling techniques to proactively identify, evaluate, and prioritize potential threats, enabling the design and implementation of effective security controls within diverse application and infrastructure environments.
• Comprehensive Security Assessments: Conduct thorough security assessments on applications, servers, networks, and cloud platforms to identify vulnerabilities, prioritize risks, and define clear remediation steps.
• Risk Analysis and Mitigation: Evaluate security risks associated with both on-premises and cloud solutions, offering actionable recommendations that balance security and business requirements.
• Standards and Compliance Audits: Conduct security audits to ensure solutions meet industry standards, regulatory requirements, and internal security policies, aligning with frameworks like NIST, CIS, ISO 27001, and cloud-specific frameworks such as CSA and AWS Well-Architected.
• Vulnerability Management: Use security tools to perform vulnerability scans and assessments in both traditional and cloud environments, prioritizing findings, and guiding remediation processes.
• Collaboration and Security Culture: Work with cross-functional teams to promote a security-first mindset, implementing security controls for cloud and on-premises systems while supporting secure development practices.
• Reporting and Documentation: Prepare comprehensive assessment and review reports, including risk assessments, mitigation strategies, and steps for strengthening security posture, particularly in cloud deployments.
• Continuous Improvement: Stay up to date on security trends, tools, and techniques, especially those related to cloud security, to continuously improve practices and recommend new tools or methods that bolster cloud security.

Work Location: Hyderabad

Shift Timings: 06.30 AM to 03.30 PM

Qualifications

Required:

• Experience: Minimum of 6 years in security consulting with demonstrated expertise in SSDLC, architectural reviews, and cloud security (e.g., AWS, Azure, GCP).
• Technical Skills:
• Proficiency in cloud security tools and technologies (e.g., AWS Security Hub, Azure Security Centre).
• Advanced knowledge of security assessment tools that enable SAST, DAST, IAST etc. (e.g., Prisma Cloud, Qualys, Checkmarx, GitHub Advance Security).
• Strong understanding of cloud security architecture, identity and access management, and cloud-specific security frameworks (e.g., CSA, AWS Well-Architected).
• Certifications: Security certifications such as CISSP, CCSK, CCSP, CEH, OSCP, or similar are preferred.
• Problem-Solving: Excellent analytical skills with a proactive, methodical approach to identifying and mitigating security risks, particularly in cloud environments.
• Communication: Strong written and verbal communication skills, capable of conveying complex security concepts to both technical and non-technical stakeholders.
• Team Collaboration: Proven ability to work independently and collaboratively within cross-functional teams, enhancing security across traditional and cloud infrastructures.