Infrastructure Security Lead

Role Overview: You will be joining Dezerv as an Infrastructure Security Lead, reporting directly to the Chief Information Security Officer (CISO). Your primary responsibility will be securing the network, systems, and cloud environments, with a focus on AWS. Your role will involve designing and implementing a comprehensive vulnerability management program and ensuring regulatory and compliance standards are met. Key Responsibilities: - **Vulnerability Management:** Design, implement, and manage the end-to-end vulnerability management program. This includes executing network and infrastructure vulnerability scans, prioritizing findings, and collaborating with technology teams for timely remediation. - **Cloud Infrastructure Security (AWS):** Act as the subject matter expert for securing the cloud infrastructure, implementing and maintaining security best practices for cloud networking, IAM, data protection, and logging and monitoring. - **CNAPP & Cloud Compliance:** Take ownership of the Cloud Native Application Protection Platform (CNAPP) solution, monitoring the cloud security posture and protecting cloud workloads to ensure continuous compliance. - **Network Security:** Design, implement, and manage network security controls like firewalls, IDS/IPS, WAF, and network segmentation to protect against internal and external threats. - **Regulatory & External Audits:** Lead infrastructure-related aspects of internal and external audits such as ISO 27001, SOC 2, and PCI DSS. Ensure effective implementation and documentation of controls. - **Change & Patch Management Compliance:** Oversee technology teams" change and patch management processes, reviewing changes for security impact and ensuring critical patches are deployed in compliance with requirements and SLAs. - **Security Architecture & Hardening:** Develop and maintain secure configuration baselines and hardening standards for operating systems, network devices, and cloud services. Review new infrastructure designs for potential security risks. - **Incident Response:** Provide expertise in infrastructure forensics and containment, serving as a key technical resource in the security incident response process. Qualifications Required: - **Experience:** 5 to 7 years in an infrastructure or cloud security role. - **Individual Contributor Mindset:** Highly motivated, proactive, and independent with the ability to drive security initiatives without direct supervision. - **Hands-on Vulnerability Management:** Experience with vulnerability scanning tools and building/run a vulnerability management program. - **Cloud Security Expertise (AWS Preferred):** Practical knowledge of securing cloud environments, particularly AWS, and experience with AWS security services. - **CNAPP Knowledge:** Understanding of CNAPP concepts and tools for cloud compliance and security. - **Network Security:** Proficiency in network protocols, firewalls, VPNs, routing, switching, and network segmentation. - **Audit & Compliance:** Participation in infrastructure-focused security audits and interaction with external auditors. - **Patch & Change Management:** Understanding of ITIL-based patch and change management processes. - **Certifications:** Professional security certifications like CompTIA Security+, CCSP, AWS Certified Security - Specialty, or CISSP are desirable.,