Browse current jobs

Cloud Security - AD - Gurgaon

KPMG · Mumbai

Apply on employer website

Source and collection record

Read the employer source

Last observed by our collector: . This is not a manual review or a confirmation from the employer.

Employer requisition: INTG10043814

Job type and experience labels are automated discovery categories. The employer determines eligibility. Original experience wording was not retained separately; check the current employer page.

How sourcing and classification work · Report a discrepancy

Your application evidence checklist

Mark the statements you can support after reading the employer source. This checklist stays on this page; it does not score your eligibility or submit an application.

0 of 3 checks marked. Keep unresolved requirements as questions for the employer.

Collected role description

About KPMG in India KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada. KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment. Design, implement, assess, manage and operate tools / architecture / processes / controls to secure client’s cloud infrastructures and services. Design cloud security architecture including, but not limited to, secure cloud landing zone, secure cloud infrastructure & services and cloud workloads. Develop and document security policies & procedures as per the requirements. On-boarding cloud accounts to tools such as Wiz, Prisma, etc. Define relevant cloud policies / rules / alerts, perform security remediation as per findings. Responsible for managing CNAPP, CSPM, CWPP, KSPM, CIEM, Code Security, Data Security etc. Prioritize security findings and provide recommendations to mitigate the security gaps and work with cloud owners to remediate security findings. Develop custom playbooks for threat hunting and auto-remediation. Assist with incident response in the event of security breach. Review of client’s cloud security posture and make recommendations for improvement. Actively contribute to innovation activities which are undertaken in the area of cloud security. Hands-on experience with at least one major public cloud platform, such as AWS, Azure, or Google Cloud Platform. Any other public cloud platform along with these will be an additional desirable attribute. Experience in CNAPP solutions (Palo Alto Prisma Cloud, Wiz). Should have setup, deployed and tweaked the product rules and configurations to suit requirements of different organizations. Experience in infrastructure as code (terraform) Experience in scripting languages such as Python, PowerShell etc. Security automation skills/experience will be an additional desirable attribute. Strong understanding of containerization technologies/concepts such as Kubernetes, Docker etc. and related security best practices. Experience in creating and evaluating cloud security architectures by following industry best practices. Hands-on experience on cloud native security features like Azure Sentinel, Microsoft Defender for cloud, CloudTrail, GuardDuty, Inspector, Security Hub, Command Centre etc. In-depth knowledge of managing common cloud security threats and vulnerabilities. Experience with security compliance standards such as ISO 27001/27002/27017, NIST, CSA CCM etc. Understanding on various government and regulatory compliance requirements w.r.t cloud security Knowledge of Identity and Access Management protocols/solutions such as SSO, SAML Federated Identity, RBACs & authorization solutions. Experience with Linux & Windows operating systems for patch management, log management, and understanding on OS hardening requirements. Impeccable communication skills, both written and oral. Strong organization and time-management skills, with the ability to swiftly transition between projects and tasks. Must have one or more cloud certifications. Desirable certifications include: - AZ-500 (Azure Security Engineer) SC-100 (Cybersecurity Architect Expert) AWS Certified Specialty – Security Google Cloud Professional Cloud Security Engineer AZ-303 (Microsoft Azure Architect Technologies) Prisma Certified Cloud Security Engineer (PCCSE) WIZ certifications Equal employment opportunity information KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

Collected minimum qualification

<ul style="padding-left: 72px;"><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Hands-on experience with at least one major public cloud platform, such as AWS, Azure, or Google Cloud Platform. Any other public cloud platform along with these will be an additional desirable attribute.</strong></span></span></p><ul style="padding-left: 0px;"><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience in CNAPP solutions (Palo Alto Prisma Cloud, Wiz). </strong></span></span><span style="background-color: white; color: black;"><span style="font-size: 10pt;">Should have setup, deployed and tweaked the product rules and configurations to suit requirements of different organizations.</span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience in infrastructure as code (terraform)</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience in scripting languages such as Python, PowerShell etc. Security automation skills/experience will be an additional desirable attribute.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Strong understanding of containerization technologies/concepts such as Kubernetes, Docker etc. and related security best practices.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience in creating and evaluating cloud security architectures by following industry best practices. </strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Hands-on experience on cloud native security features like Azure Sentinel, Microsoft Defender for cloud, CloudTrail, GuardDuty, Inspector, Security Hub, Command Centre etc.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>In-depth knowledge of managing common cloud security threats and vulnerabilities.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience with security compliance standards such as ISO 27001/27002/27017, NIST, CSA CCM etc.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Understanding on various government and regulatory compliance requirements w.r.t cloud security</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Knowledge of Identity and Access Management protocols/solutions such as SSO, SAML Federated Identity, RBACs & authorization solutions.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Experience with Linux & Windows operating systems for patch management, log management, and understanding on OS hardening requirements. </strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Impeccable communication skills, both written and oral.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Strong organization and time-management skills, with the ability to swiftly transition between projects and tasks.</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Must have one or more cloud certifications. Desirable certifications include: -</strong></span></span></p><ul style="padding-left: 48px;"><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>AZ-500 (Azure Security Engineer)</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>SC-100 (Cybersecurity Architect Expert)</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>AWS Certified Specialty – Security</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Google Cloud Professional Cloud Security Engineer </strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>AZ-303 (Microsoft Azure Architect Technologies)</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>Prisma Certified Cloud Security Engineer (PCCSE)</strong></span></span></p></li><li class="ortl-align-justify"><p style="background-color: white; line-height: 15pt; margin-bottom: 0in; margin-right: 0.25pt; margin-top: 0in; text-align: justify; vertical-align: baseline;"><span style="background-color: white; color: black; font-family: Calibri, sans-serif;"><span style="font-size: 10pt; font-weight: normal;"><strong>WIZ certifications</strong></span></span></p></li></ul></li></ul><p style="-webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); border: 0px; color: rgb(3, 16, 98); font-family: Arial, Helvetica, sans-serif; font-feature-settings: inherit; font-kerning: inherit; font-language-override: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: 14.001px; font-stretch: inherit; font-style: normal; font-variant-alternates: inherit; font-variant-caps: normal; font-variant-east-asian: inherit; font-variant-emoji: inherit; font-variant-ligatures: normal; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 400; letter-spacing: normal; line-height: inherit; margin: 1em 0px 0px; orphans: 2; padding: 0px; scrollbar-width: thin; text-align: start; text-decoration-color: initial; text-decoration-style: initial; text-decoration-thickness: initial; text-indent: 0px; text-transform: none; vertical-align: baseline; white-space: normal; widows: 2; word-spacing: 0px;"><span style="font-family: inherit;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-language-override: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: 10pt; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 15.3333px; margin: 0px; padding: 0px; scrollbar-width: thin; vertical-align: baseline;">Equal employment opportunity information </span></span></p><p style="-webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); border: 0px; color: rgb(3, 16, 98); font-family: Arial, Helvetica, sans-serif; font-feature-settings: inherit; font-kerning: inherit; font-language-override: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: 14.001px; font-stretch: inherit; font-style: normal; font-variant-alternates: inherit; font-variant-caps: normal; font-variant-east-asian: inherit; font-variant-emoji: inherit; font-variant-ligatures: normal; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 400; letter-spacing: normal; line-height: inherit; margin: 1em 0px 0px; orphans: 2; padding: 0px; scrollbar-color: rgba(49, 45, 42, 0.15) rgba(0, 0, 0, 0); scrollbar-width: thin; text-align: start; text-decoration-color: initial; text-decoration-style: initial; text-decoration-thickness: initial; text-indent: 0px; text-transform: none; vertical-align: baseline; white-space: normal; widows: 2; word-spacing: 0px;"><br><span style="font-family: inherit;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-language-override: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: 10pt; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 15.3333px; margin: 0px; padding: 0px; scrollbar-width: thin; vertical-align: baseline;">KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.</span></span></p></li></ul>

Collected experience requirement

Hands-on experience with at least 1 major public cloud platform, such as AWS, Azure, or Google Cloud Platform