SAPIENS INTERNATIONAL
Security Specialist
IT – Cybersecurity Operations | Cybersecurity Specialist | Full-Time | India
ABOUT THE ROLE
Sapiens International is looking for a Security Specialist (Cybersecurity Specialist) to join our global IT Security team. This is a hands-on role for someone who wants to specialize in vulnerability management and cloud security — owning the end-to-end vulnerability lifecycle and the security of our cloud, container, and Kubernetes environments.
Familiarity with the other tools in our security stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Microsoft Purview, DLP, and email protection — is an added advantage, but the core of this role is hands-on, specialized ownership of vulnerability management and cloud security.
KEY RESPONSIBILITIES
Vulnerability Management & Automation
- Own the end-to-end vulnerability management lifecycle: asset discovery, scan orchestration, CVSS-based prioritization, ticketing, SLA tracking, and remediation validation
- Build AI-assisted automation pipelines that replace manual reporting, accelerate remediation, and surface actionable risk insights for stakeholders
- Develop integrations between security tools and ITSM platforms using Python, REST APIs, and scripting
- Maintain dashboards and automated reporting for vulnerability posture and compliance KPIs
Cloud Security
- Manage end-to-end security for cloud VMs, Kubernetes, and containerised workloads — ensuring secure configuration, runtime protection, and access controls across the infrastructure
- Manage and operate CSPM, CNAPP, and CWP platforms across cloud accounts — policy configuration, findings triage, SLA-driven closure, and compliance posture tracking against CIS, NIST, or PCI-DSS benchmarks
- Manage container image security and registry operations — image scanning in CI/CD and runtime, access controls, and audit logs, partnering with developers and DevOps teams to drive remediation without blocking releases
- Manage Kubernetes and cloud misconfiguration findings and translate them into actionable remediation tasks for platform and application teams
- Drive Azure, AWS, GCP, OCI security hardening in line with CIS, NIST, or equivalent frameworks
- Conduct security architecture reviews for new cloud workloads and projects
- Implement and manage modern authentication frameworks: cloud IDP, SSO, MFA, and Zero Trust principles
Other Security Tools & Projects (Added Advantage)
- Support administration of other tools in our stack — DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, and email protection/mail relay — as needed
- Work on additional security tool implementation, upgrades, and improvement projects assigned by the manager
- Partner with other IT and security teams to roll out new controls and policies
- Document standard operating procedures and runbooks for the tools you own
REQUIREMENTS
Experience
- 5+ years of experience in the cybersecurity field, with specialized, hands-on experience in vulnerability management and cloud security
- Proven experience owning the end-to-end vulnerability management lifecycle, from discovery through remediation
- Proven experience securing cloud, container, and Kubernetes environments, including CSPM, CNAPP, and CWP tools and compliance posture tracking
- Experience building security automation using Python, APIs, or scripting is a strong plus
- Exposure to other tools such as DNS security, CrowdStrike Falcon (EDR, Identity Protection, Exposure Management), Purview, DLP, or email protection is an added advantage
Technical — Must Have (Vulnerability Management)
- CVSS-based vulnerability prioritization, scan orchestration, and remediation validation
- Building automation and integrations between security tools and ITSM platforms using Python and REST APIs
- Maintaining dashboards and automated reporting for vulnerability posture and compliance KPIs
Technical — Must Have (Cloud Security)
- Hands-on experience with CSPM, CNAPP, and CWP platforms
- Securing cloud VMs, Kubernetes, and containerised workloads — configuration, runtime protection, and access controls
- Container image security and CI/CD scanning
- Cloud IDP, SSO, MFA, and Zero Trust principles
- Azure, AWS, GCP, or OCI security hardening (CIS, NIST, or equivalent frameworks)
- Security architecture reviews for cloud workloads
Soft Skills & Language
- Fluent written and verbal English
- Perceptive, fast learner with a strong sense of urgency
- Able to multi-task, and remain organized in a fast-paced global environment
- Highly independent and proactive, with a team-first mindset
Advantage (Not Required)
- Hands-on exposure to DNS security
- Hands-on exposure to the CrowdStrike Falcon platform (EDR, Identity Protection, Exposure Management)
- Familiarity with Microsoft Purview, DLP, or email protection/mail relay
- Security-related certifications: CISSP, CISM, CEH, CompTIA Security+, or vendor-specific (CrowdStrike, Microsoft, etc.)