Cloud Security Lead

Role: Cloud Security Lead

Required Skill Set:

• Microsoft Defender XDR
• Microsoft Cloud security stack
• Microsoft Defender for Cloud Apps (MDCA/CASB)
• Cloud Workload Protection (CWPP)
• Cloud Security Posture Management (CSPM)

Experience: 10+ years

Location: Chennai, Hyderabad

Job Description:

1. Design Azure landing zones and security reference architectures aligned to Zero Trust.
2. Establish enterprise guardrails using Azure Policy, Management Groups, and RBAC with Privileged Identity Management (PIM).
3. Own CSPM posture via Microsoft Defender for Cloud
4. Operate and optimize Microsoft Defender XDR for end-to-end detection and response.
5. Manage Microsoft Sentinel (SIEM/SOAR): KQL analytics, hunting, UEBA, playbooks (Logic Apps), and incident workflows.
6. Lead incident response: triage, containment, forensics (Log Analytics, snapshots), root cause analysis, stakeholder communication.
7. Administer Microsoft Defender for Cloud Apps (MDCA) for app discovery, OAuth app governance, session controls, DLP, and data protection.
8. Implement Conditional Access + MDCA session policies for inline control across key SaaS applications.
9. Secure workloads using Defender for Cloud plans (VMs, Storage, SQL, AKS, App Services): hardening, vulnerability management, agent coverage.
10. Drive AKS security: network policies, identity, secrets, image scanning, admission controls; secure ACR and supply chain flows.
11. Drive AKS security: network policies, identity, secrets, image scanning, admission controls; secure ACR and supply chain flows.
12. Implement controls: Azure Firewall, NSGs, DDoS Protection, Bastion, JIT VM access.
13. Protect applications via Azure WAF (App Gateway/Front Door), TLS cert lifecycle, and bot management.
14. Administer Entra ID (Azure AD): Conditional Access, MFA, CAE, Identity Protection, PIM, workload identities/managed identities.
15. Enforce encryption and secrets management via Azure Key Vault (HSM-backed keys, CMK, rotation).

Must Have:

• Microsoft Defender XDR
• Microsoft Defender for Cloud Apps (MDCA/CASB)
• Defender for Cloud (CSPM & CWPP)