Cloud Digital Security Ops Specialist

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 56,000 employees in nearly 30 countries, is recognized for its consulting, digital services and software development. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organizations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a fully collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2023, the Group generated revenues of €5.8 billion.
The world is how we shape it.

Experience: 4 to 6 yrs

Location: BLR

Engineering Graduate - preferably B.E. /B tech in I.T or Computer Engineering.

The Cloud Digital Security Ops Specialist is responsible for:

1. Driving IM wide improvements, while ensuring that its overall strategy remains aligned with corporate security policies and IM security priorities.
2. Ensuring conformity with respect to Organisation/customers Enterprise Security Protection Baselines (ESPB) guidelines.

Job Description:

1. Requires knowledge of compliance and a commitment to acting with integrity and will be part of the Cloud Compliance team (Cloud Security Controls & Procedures),
2. Remediation enablement:
3. Analyse critical (false and true positive) alerts and security findings
4. Identify systemic issues, perform root cause analysis and launch remediation action plan
5. Support application team in understanding security alerts, and prioritising remediation actions
6. Provide guidance for improving overall security scoring over time
7. Audit:
8. Perform adhoc cyber audits on the overall public cloud infrastructure for all implemented security controls (security guardrails, security hardening, logging infrastructure, vulnerability management, obsolescence management, etc.)
9. Awareness and communication:
10. Raise awareness on cyber security for cloud to application owners
11. Communicate on security capabilities
12. Blind spot coverage thanks to the deployment of missing security capabilities:
13. Identify, assess cyber security blind spots
14. Run project management activities to deploy missing security capabilities
15. Perform entry into service, and transfer L1/L2 support to concerned PSL team
16. Ensure the maintenance and lifecycle management of the security capabilities
17. Define the required security controls to make the usage of the cloud services compliant.
18. Ensure a good quality of the description of the security control taking into account the company context.
19. To be able to contribute towards agile transformation activities across the organisation

Skills:

1. Excellent English communication and problem solving skills,
2. Ability to understand complex systems processes, programs and accustomed to dealing with all levels from operational staff to senior management inside as well as outside IM
3. Passion for emerging technology and excited at the prospect of building upon your existing technical knowledge and learning new skills
4. Strong analytical problem solving ability, Technical capability and maturity to assist and collaborate and conduct workshops with other teams
5. Knowledge of cyber security best practices
6. Cloud Security compliance or more generic Cyber Security Standards, Cloud Security Engineer
7. Cloud Technical knowledge, AWS and/or GCP is mandatory, Knowledge of Azure would be a plus
8. Cloud SecOps skills like vulnerability management, obsolescence management is mandatory

Total Experience Expected: 04-06 years

Qualification & Certifications

1. Engineering graduate - preferably B.E. /B tech in I.T or Computer Engineering
2. At least one Certification Preferred:-
3. AWS Cloud Certifications ( Cloud Practitioner, Security Specialty)
4. Google Cloud Certifications ( Associate/Professional,

Ready to work at client site in Bengaluru as per the client support hours

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.