Security Posture Management Specialist

The Security Posture Management Specialist is responsible for operating and continuously improving the organization’s Security Posture Management capability across cloud and enterprise environments. The role focuses on Cloud Security Posture Management (CSPM), Attack Surface Management (ASM), remediation governance, and security posture reporting to ensure security risks are accurately identified, prioritized, assigned, tracked, and monitored.

Key Responsibilities

• Operate and continuously improve the organization's Cloud Security Posture Management (CSPM) capability across Azure and AWS by monitoring security configurations, identifying misconfigurations, and managing security findings.
• Perform risk-based prioritization of security findings by considering business criticality, exploitability, asset exposure, regulatory requirements, and threat intelligence to ensure remediation efforts focus on the highest risks.
• Operate and enhance Attack Surface Management (ASM) capabilities, including asset discovery, internet-facing exposure identification, shadow IT visibility, attack path analysis, and remediation tracking.
• Monitor remediation activities, escalating overdue or high-risk issues through established governance processes.
• Develop, maintain, and continuously improve security posture dashboards, KPIs, metrics, and executive reporting to provide visibility into cyber risk, remediation progress, and overall program effectiveness.
• Collaborate with Security Operations, Cloud Engineering, Infrastructure, Risk, Architecture, and Application teams to improve the organization's overall security posture and promote accountability for remediation activities.
• Identify opportunities to automate posture management processes through integration with security platforms, CMDB, IT Service Management (ITSM), and reporting solutions.
• Contribute to the evaluation, onboarding, tuning, and continuous optimization of CSPM and ASM capabilities to improve detection quality and reduce operational overhead.

Required Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, Information Technology, or a related field.
• Minimum 3 years of experience in Cyber Security, Cloud Security, Vulnerability Management, Security Operations, or a related discipline.
• Hands-on experience with Cloud Security Posture Management (CSPM) solutions such as Microsoft Defender CSPM, Qualys TotalCloud, or equivalent platforms.
• Experience working with public cloud environments, including Azure and AWS.
• Strong understanding of cloud security risks, security misconfigurations, vulnerability management, and remediation processes.
• Experience managing security findings and driving remediation activities across multiple technical stakeholders.
• Experience developing security metrics, dashboards, and executive-level reporting.
• Working knowledge of security frameworks and standards such as CIS Benchmarks, NIST CSF, and NIST 800-53.
• Excellent analytical, problem-solving, communication, and stakeholder management skills.
• Experience with IT Service Management platforms such as ServiceNow is desirable.
• Relevant security certifications (e.g., AZ-500, SC-200, SC-100, CCSK, CCSP) are considered an advantage.