Unit Manager - Information Security

Location Name: Pune Corporate Office - Mantri
Job Purpose
Information security team member who is proficient in maintaining & managing Cloud Security (Cloud SOC), CSPM, Container security, Kubernetes VA management.
Duties And Responsibilities
A- Minimum required Accountabilities for this role
Role: A specialist is responsible for continuously monitoring and improving the security posture of cloud environments (AWS, Azure, GCP) by identifying misconfigurations, enforcing compliance, and mitigating alert & risks.
Key Responsibilities
Security Posture Monitoring:
Implement and manage SIEM & CSPM tools (e.g., Microsoft Sentinel, Palo Alto Prisma Cloud, Wiz, Orca, Microsoft Defender for Cloud/Endpoint).
Continuously assess cloud configurations for security risks and compliance violations.
Monitor for drift from secure baselines and enforce remediation workflows.
Risk Identification & Remediation
Detect misconfigurations, excessive permissions, and insecure storage or networking setups.
Collaborate with cloud engineering and DevOps teams to remediate findings.
Prioritize risks based on impact and likelihood.
Incident Response & Forensics
Investigate alerts and anomalies flagged by CSPM tools.
Support cloud incident response and post-mortem analysis.
Maintain logs and evidence for forensic investigations.
Role: Focuses on securing containerized environments (e.g., Docker, Kubernetes) and integrating security into the software development lifecycle.
B- Additional Accountabilities Pertaining To The Role
Manage & maintain security tool Microsoft Sentinel & Palo Alto Prisma
Maintain compliance as per organization compliance policy
Highlight risk & mitigation plan
Work with SOC team to investigate security alerts and improve detection rules.
Document security policies, configurations, and incident reports.
Risk analysis and mitigation
Vendor Co-ordination
Strong troubleshooting, analytical, and communication skills
Energetic, self-motivated and self-sufficient in accomplishing tasks.
Good analytical and problem solving skills.
Key Decisions / Dimensions
Identification of right contacts to channelise the issue/problem for closure.
Review the alert/incident and categorised True positive / False positive and take require steps.
Discuss observation response as applicable & improve security controls.
Decide if the policy and procedure documents need changes based on new regulations or audit outcomes.|Potential regulatory actions due to non-compliances
Major Challenges
Handling of fast changing environment with variety of cloud service providers
Handling of compliance expectations in stringent timelines
Handling multiple stakeholders at a time
Coordination with third party consultants who assist in auditing and compliance initiatives
Required Qualifications And Experience
Qualifications
Minimum 6+ years of experience in Cloud Security Posture management, Cloud workload protection. (CSPM, CWP)
Minimum 6+ years in Information / Cyber / application security.
Work Experience
Knowledge & hands-on experience on CSPM & CWP tool administration. Experience in PaloAlto Prisma, AV/EDR, SIEM (Microsoft Sentinel), Vulnerability management tool, FIM
Experience in Project management.
Positive attitude, Hard Worker and team player
Certifications like CEH (Ethical Hacking), Azure/AWS Security, application penetration testing would be an added advantage

Work arrangement
No