Cloud Security Posture Management Lead Engineer

Guidehouse

. Lead CSPM operations across Azure and AWS, including security posture, configuration, identity, vulnerability, and exposure management .

Posted 10/27/2026full-timeTrivandrum • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security operations across Azure and AWS, focusing on security posture, vulnerability management, and compliance with standards such as CIS and NIST. Proficient in automation and remediation practices to enhance cloud security architecture and incident response.

Highest-signal resume keywords

Microsoft Azure SecurityAWS SecurityCloud Vulnerability ManagementSecurity Configuration ComplianceAutomation and Remediation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security ArchitectureInfrastructure as Code SecurityCloud Logging and MonitoringCI/CD and DevSecOpsContainer SecurityPythonPowerShellWizCIS BenchmarksNIST CSF

Soft Skills

MentoringCollaboration

Tools & Technologies

TerraformCloudFormationSIEMSOCIncident Response

Certifications & Qualifications

ISO 27001

Industry Keywords

CSPMCloud IAMLeast PrivilegeMITRE ATT&CKThreat Modeling

Tech Stack

Tools & technologies

AWSAzureCloudKubernetesPythonTerraform

About the role

Key responsibilities & impact

Lead CSPM operations across Azure and AWS, including security posture, configuration, identity, vulnerability, and exposure management
Establish and maintain secure cloud configurations aligned to CIS, NIST, ISO 27001, and organizational security standards
Identify, prioritize, and drive remediation of cloud misconfigurations, vulnerabilities, excessive permissions, exposed services, and toxic-risk combinations
Partner with Cloud Engineering, DevOps, Application Security, Infrastructure, IAM, SOC, Vulnerability Management, and GRC teams to remediate security risks
Establish policies and automation to reduce manual remediation, improve response times, and eliminate recurring cloud security issues
Integrate Wiz findings with SIEM/SOC, vulnerability management, ticketing, and incident response processes
Support cloud security architecture reviews, threat modeling, incident response, data protection, and investigations involving AWS and Azure
Develop metrics and executive reporting demonstrating cloud risk, remediation trends, control effectiveness, and security posture improvement
Mentor engineers and analysts and establish repeatable cloud security engineering practices

Requirements

What you’ll need

Experience with Microsoft Azure security and architecture
Experience with AWS security and architecture
Cloud vulnerability and exposure management
Cloud logging and monitoring
Security configuration and compliance
Automation and remediation
Cloud security architecture
Preferred: Wiz / CNAPP / CSPM
Preferred: Cloud IAM and least privilege
Preferred: Infrastructure as Code security (Terraform/CloudFormation)
Preferred: CI/CD and DevSecOps
Preferred: Container/Kubernetes security
Preferred: MITRE ATT&CK and cloud threat modeling
Preferred: Python, PowerShell, or similar automation
Preferred: CIS Benchmarks, NIST CSF, and ISO 27001
No travel required
No security clearance required

Benefits

Comp & perks

Competitive compensation
Comprehensive benefits package
In-house physician consultations
Nutritious food options at the workplace
Confidential counseling through the Employee Assistance Program
Wellness-focused offerings supporting overall well-being
Learning and development programs
Continuous upskilling and career development opportunities