Cloud Security Engineer (Prisma Cloud)

Job Title: Prisma Cloud (CNAPP) Security Engineer – Azure

Job Summary

We are seeking a skilled Prisma Cloud (CNAPP) Security Engineer with strong expertise in Microsoft Azure cloud security. The ideal candidate will be responsible for implementing, managing, and optimizing Palo Alto Networks Prisma Cloud to secure cloud-native applications and infrastructure across the Azure environment.

Key Responsibilities

Cloud Security Posture Management (CSPM)

• Monitor and continuously assess Azure cloud environments for security risks and misconfigurations using Prisma Cloud.
• Identify, remediate, and track configuration drift across Azure subscriptions and resources.
• Identify the gaps, fine-tune existing policies and creation of custom rules.

Cloud Workload Protection (CWPP)

• Secure Azure virtual machines, containers, Kubernetes clusters (AKS), and serverless workloads.
• Monitor and respond to runtime threats, malware and suspicious activities.
• Implement workload security controls and runtime protection policies.

DevSecOps Integration

• Integrate Prisma Cloud security controls into CI/CD pipelines.
• Perform security scanning of Infrastructure as Code (IaC), container images, and application artifacts before deployment.
• Collaborate with development teams to remediate vulnerabilities and enforce secure coding practices.

Cloud Infrastructure Entitlement Management (CIEM)

• Assess and manage Azure identities, service principals, and access permissions.
• Identify excessive privileges and implement least-privilege access controls.
• Monitor identity-related security risks and provide remediation recommendations.

Compliance & Governance

• Evaluate Azure environments against industry standards and regulatory frameworks including CIS, MITRE, NIST, IRDAI etc.
• Generate security dashboards, audit reports, and compliance assessments.
• Support internal and external audit activities.

Security Operations & Automation

• Implement Infrastructure as Code (IaC) security best practices using Terraform.
• Collaborate with security, cloud engineering, and DevOps teams to improve security posture and operational efficiency.

Required Skills & Qualifications

Technical Skills

• Hands-on experience with Palo Alto Networks Prisma Cloud (CNAPP).
• Strong understanding of Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP), and Cloud-Native Application Protection Platform (CNAPP).
• Experience securing Microsoft Azure cloud environments.
• Knowledge of Azure security services including Microsoft Defender for Cloud, Azure IAM, Azure Virtual Networks, Analysing Flowlogs.
• Experience with Azure Kubernetes Service (AKS), containers, and serverless technologies.
• Proficiency in Infrastructure as Code (IaC) tools such as Terraform.
• Familiarity with CI/CD tools and DevSecOps practices.
• 3+ years of experience in Cloud Security engineer role.