Senior Information Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

First American (India)

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1994

🛡️ Insurance

💼 Consulting

🏥 Healthcare

💰 $450M Post-IPO Debt - First American on 2024-09

Insurance • Consulting • Healthcare

First American (India) is a Global Capability Center (GCC) of First American Financial Corporation that provides software development, data & analytics, back-office, and knowledge-processing services to support title insurance, settlement services, mortgage solutions and related risk-management operations across the US, UK, Australia and Canada. With locations in Bangalore, Hyderabad and Salem, FAI delivers corporate IT and production services for its parent company and emphasizes a people-first culture recognized as a top workplace.

📋 Description

• Implement, configure, and administer the organization's enterprise CNAPP platform across cloud environments • Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform • Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools • Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations • Monitor platform health, coverage, data ingestion, scanning status, and integration failures • Evaluate and implement new CNAPP capabilities as the organization's cloud environment and security requirements evolve • Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services • Work with cloud engineering teams to establish secure cloud configuration baselines • Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services • Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context • Work with infrastructure and application teams to drive remediation • Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and exploitable attack paths • Collaborate with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to improve cloud security posture

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience • 7+ years of Information Security experience, including significant hands-on cloud security experience • Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP • Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies • Strong understanding of cloud security architecture, cloud IAM and least privilege, cloud networking and exposure, vulnerability management, containers and Kubernetes security, Infrastructure-as-Code security, cloud logging and monitoring, and security configuration management • Experience analyzing and remediating cloud security findings • Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages • Familiarity with CI/CD pipelines and DevSecOps practices • Ability to troubleshoot complex security integrations and cloud configurations • Strong analytical, problem-solving, documentation, and communication skills • Familiarity with MITRE ATT&CK, particularly cloud-related attack techniques • Relevant certifications such as CCSP, CCSK, AWS Security Specialty, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, or CISSP/equivalent

🏖️ Benefits

• Equal Opportunity Employer committed to an inclusive, non-discriminatory workplace • Best Workplaces for Women and Workplace with Inclusive Practices certifications • Fortune 100 Best Companies to Work For recognition