Azure Platform Security

Promaynov Advisory Services Pvt. Ltd · Bangalore, India

Role: Assistant Manager

Location: Bangalore, Gurgaon, Hyderabad, and Pune

Mode: Hybrid

Role Overview : Cloud Engineering supports the firm by delivering modern platform capabilities, observability services, and engineering enablement across distributed systems. The Platform Security team safeguards cloud platforms by implementing secure‑by‑default patterns, enforcing guardrails, and supporting threat detection, response, and continuous security improvement across digital services.

Key Responsibilities:

Technical Leadership & Direction

• Provide deep technical leadership in cloud security, guiding implementation of complex controls across identity, network, compute, and data layers.
• Lead service onboarding for mission‑critical workloads, defining secure patterns and telemetry requirements.
• Review and approve core platform security changes and IaC module updates.

Security Strategy, Governance & Compliance

• Shape platform‑wide security strategy and lead adoption of security policies, standards, and governance controls.
• Own lifecycle management of cloud security policies, guardrails, and compliance measures.
• Drive access governance initiatives, privileged access review cycles, and enforcement of minimum‑privilege models.

Platform Security Architecture

• Architect scalable and automated security solutions including network perimeter protections, workload identity models, encryption strategies, and secrets management.
• Evaluate and design controls for multi‑environment and multi‑tenant scenarios.

DevSecOps Excellence

• Lead integration of enterprise‑grade DevSecOps capabilities across CI/CD pipelines including attestation, SBOM, dependency scanning, SAST/DAST, and image hardening.
• Govern release gates, pipeline approvals, and policy‑as‑code implementations.

Threat Detection & Incident Response Leadership

• Partner with security operations to enhance detection coverage, automated playbooks, and threat intelligence pipelines.
• Act as a senior responder during incidents—guiding containment, analysis, and remediation activities.

Cross‑Team Collaboration & Influence

• I nfluence engineering, SRE, platform, and product teams to adopt secure engineering practices.
• Represent the Platform Security function in design assessments, architecture councils, and leadership forums.
• Provide deep technical insights to stakeholders in clear, concise language.

Shift Responsibilities & Operational Support

• Work in rotational shifts as required.
• Participate in on‑call rotations to respond to and resolve high‑severity incidents in a timely manner.

The Person:

• Deep expertise in cloud security architecture, IAM governance, network security, encryption, and policy‑as‑code.
• Strong leadership capabilities — able to influence, mentor, and enable multiple engineering teams.
• Demonstrated experience designing and implementing enterprise‑scale security controls.
• Strong grasp of DevSecOps, secure SDLC, CI/CD pipeline security, code signing, and reproducible builds.
• Experienced in threat detection, incident response, and cloud forensics.
• Extensive knowledge of CI/CD pipelining skills using Azure DevOps or equivalent
• Experience of working in an Enterprise environment.
• Works independently, makes strong technical decisions, and drives engineering excellence across teams.