SecurityDevOps/Cloud
Cloud Security Posture Management
Also written as CSPM, CNAPP, Cloud Security Posture
Tools that continuously scan cloud accounts for risky misconfigurations, such as public storage buckets, over-broad permissions or unencrypted databases. CNAPP is the broader bundle that adds workload and container protection. Wiz, Prisma Cloud and Microsoft Defender for Cloud are common examples.
Think of it like
A building inspector who walks every floor every day, checking for propped-open fire doors.
Junior or senior?
Anyone can turn on a scanner and get thousands of alerts.
Senior sounds like
Talks about ranking findings by real risk and getting them fixed by the teams who own the resources.
Ask them
“When the tool flagged thousands of issues, how did you decide what to fix first, and who actually fixed them?”