4 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Design, implement, and maintain security controls across AWS, Azure, GCP, and OCI.
- Own deployment, tuning, and daily operation of CNAPP platforms such as Cortex Cloud, Wiz, and Orca.
- Manage CSPM, CWPP, CIEM, DSPM, vulnerability management, and container/Kubernetes security capabilities.
- Triage findings by risk and attack path, drive remediation, and track SLAs and risk-reduction metrics.
- Build custom policies, detection rules, and automated remediation workflows.
- Integrate IaC scanning, SAST/SCA, secrets detection, and container image scanning into CI/CD pipelines.
- Integrate cloud telemetry with SIEM/SOAR platforms.
- Map cloud controls to CIS Benchmarks, NIST, ISO 27001/27017, and other applicable regulations.
- Support audits, produce evidence, and maintain security documentation, standards, and runbooks.
- Report on security posture, risk trends, and KPIs while advising cloud platform, DevOps, SRE, and application teams.
Requirements
- At least 5 years of cloud security experience.
- Hands-on experience with at least one of AWS, Azure, GCP, or OCI and knowledge of the others.
- Experience with leading CNAPP tools such as Cortex Cloud, Wiz, Prisma Cloud, or Orca.
- Strong understanding of cloud IAM, network security, encryption/KMS, secrets management, and logging/monitoring.
- Experience with infrastructure as code, preferably Terraform, and IaC security scanning.
- Scripting and automation skills in Python, Bash, or PowerShell, with familiarity with APIs and event-driven automation.
- Familiarity with CIS, NIST CSF, ISO 27001, and MITRE ATT&CK for Cloud.
- Strong communication, interpersonal, teamwork, independent-working, and self-motivation skills.
- Preferred certifications include AWS Certified Security – Specialty, AZ-500, Google Professional Cloud Security Engineer, OCI Security Professional, CCSP, or CISSP.
- Preferred experience includes GCP services, SIEM/SOAR tools, containers and Kubernetes security, Zero Trust, DSPM, and API security.
Benefits
- Eligible to participate in bonus and equity plans, including a new-hire equity grant and annual equity refreshers.
- Competitive compensation and benefits in a collaborative, transparent, and inclusive work environment.
- Marvell provides tools, resources, and development opportunities to support employee growth.
- The position may require export-license review for access to export-controlled technology or software.
Tech Stack
Categories
About Marvell
Marvell designs and sells semiconductors for data infrastructure, including Ethernet switching and PHYs, optical and 5G connectivity, storage controllers, and custom compute silicon (ASICs/DPUs) used by cloud providers, telecom carriers, and enterprise OEMs. Its business model centers on selling chips and platform solutions and co-developing custom silicon with major customers. Founded in 1995 and headquartered in Santa Clara, it is a public company traded on NASDAQ (MRVL).