Cybersecurity Systems Hardening Expert

• The primary responsibility of this role is to improve the security posture of Microsoft environments and containerized applications. The specialist will implement hardening strategies, handle vulnerabilities, ensure compliance, and integrate security into development pipelines to protect systems from evolving threats. · Strengthen the security of Microsoft systems (Windows Server, Active Directory, Azure) and containerized platforms (Docker, Kubernetes, AKS). Implement Microsoft Defender for Containers and related tools for threat detection and posture management. · Apply secure configuration baselines for Microsoft systems using CIS Benchmarks and Microsoft Security Baselines. Harden container images and Kubernetes deployments by implementing the least privilege, disabling root access, and using read-only file systems

• Conduct vulnerability assessments using tools like Microsoft Defender, Snyk, and Qualys. Remediate vulnerabilities in OS, container images, and workloads across hybrid and multicloud environments
• Ensure consistency to security standards such as NIST SP 800-190, CIS, and Microsoft Cloud Security Benchmark. Maintain audit trails and documentation for regulatory compliance. Supervise and respond to threats using SIEM systems and Defender XDR. Implement runtime protection and anomaly detection for Kubernetes clusters.
• Define and implement network policies, RBAC, and resource limits for containers. Use Azure Policy and Gatekeeper to prevent non-compliant deployments.
• Deploy observability tools and log analytics to supervise sensitive actions and detect incidents. Enable binary drift detection and audit logging for container environments.
• Automate security scans and policy enforcement in CI/CD pipelines. Integrate container security checks using tools like Snyk, Aqua, and Defender for Containers.
• Maintain detailed documentation of security configurations, policies, procedures, and incident responses. Build security benchmarks and profiles for container apps

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 3+ years of experience in Microsoft system hardening and container security.
• Proficiency with Docker, Kubernetes, AKS, and CI/CD tools.
• Experience with security tools: Microsoft Defender, Snyk, Qualys, SIEM platforms.
• Knowledge of cloud security (Azure, AWS, GCP) and infrastructure-as-code (Terraform, ARM).
• Relevant certifications (e.g., CKS, AZ-500, CISSP) preferred.

• All employees are automatically covered under the Medical Insurance. Company paid considerable Family floater cover covering employee, spouse and 2 dependent children up to 25 years of age.
• Siemens Gamesa provides an option to opt for Meal Card to all its employees which will be as per the terms and conditions prescribed in the company policy as a part of CTC, tax saving measure.

Siemens Energy