Job
Description
Responsibilities include. Identify and resolve security issues across the cloud infrastructure Build, deploy, and manage security tools and services Design and Manage cloud security monitoring and incident response. Implement and manage cloud security, IAM policies and controls. Perform vulnerability scans and risk analysis. Validate Technical requirements for exceptions and risk management approvals. Ensure cloud environments meet security and regulatory requirements. Automate security processes and integrate with CI/CD pipelines. Maintain cloud security and compliance documentation. Maintain a low-touch, reliable, and user-friendly infrastructure Evaluate and respond to alerts and events from security tools Tune security tool configuration to minimize false positives Develop event response documentation and processes, including diagrams for system environments, cloud operations, and security tools Collaborate with security leadership, engineering, and compliance to execute security strategies Assist other teams in solving security issues in a manner that complies with business requirements and best practices Assess our current cloud security and propose improvements or solutions Review our architecture and design through a security lens to provide actionable, timely requirements and recommendations Serve as a subject matter expert for security tools, applications, and processes Develop and implement incident response plans to effectively respond to security breaches. Collaborate with other security professionals and development teams to ensure a holistic approach to cloud security. Required education Bachelor's Degree Preferred education Master's Degree Required technical and professional expertise 5-10 yearsof experience working with a public cloud infrastructure Experience deploying and customizing security tools and controls such as vulnerability scanners, static analysers, IDS/IPS, firewalls, and endpoint security monitoring Experience using CI/CD pipelines for change management and automated security testing Experience with networking and Unix/Linux servers Experience developing software with object-oriented languages/python. Experience with log management and/or correlation systems Fluent in one or more programming or scripting language Thorough understanding of cloud and network security Ability to write SQL queries and build dashboards and reports Knowledge of networking and web protocols Knowledge of modern cloud technology components and deployment patterns Strong communication and collaboration skills Strong analytical problem solving skills Preferred technical and professional experience 5+ years of experience working in an information security role Experience with securing services in a multi-cloud environment Experience with Linux virtualization technologies such as KVM, Xen and QEMU Experience with Ceph, NFS, NVME, or object storage technologies Excellent Git skills (merges, rebase, branching, forking, submodules) Experience with Ansible, Terraform, Jenkins
