Security Specialist (Cloud & Configuration Audits)

About the Role

We are seeking a passionate Security Specialist to join our growing cybersecurity team. This role is ideal for professionals with 34 years of experience and at least 2 years of hands-on expertise in configuration audits, cloud security, and technical assessments.

You’ll work across multi-cloud environments (AWS, Azure, GCP), conduct configuration and compliance audits, assess risks, and provide expert guidance to strengthen our global infrastructure’s security posture. If you thrive in fast-paced, 247 environments, handle pressure with resilience, and enjoy solving complex challenges, we’d love to hear from you.

Key Responsibilities

• Conduct configuration audits across on-premises, hybrid, and multi-cloud environments (AWS, Azure, GCP).
• Perform security control assessments aligned with NIST, CIS, ISO 27001, SOC 2 frameworks.
• Review Infrastructure as Code (Terraform, Ansible, CloudFormation) to detect misconfigurations.
• Evaluate Kubernetes clusters, containers, and microservices for security posture.
• Analyze and strengthen API security (authentication, access controls, OWASP API Top 10).
• Identify, document, and report technical risks with clear remediation steps.
• Perform cloud security reviews (IAM, encryption, VPC, storage/networking controls).
• Prepare assessment reports, hardening guides, and security baselines.
• Collaborate with DevOps, IT, and compliance teams to implement best practices.

Required Technical Skills

• Network & Endpoint Security: Firewalls (Cisco Meraki/Ubiquiti), IDS/IPS, VPNs, EDR/XDR, MDM.
• Identity & Access: Active Directory, LDAP, SAML, OAuth, MFA; auditing IAM policies.
• Vulnerability Management: Nessus, OpenVAS, or equivalent.
• SIEM & Monitoring: ManageEngine Log360 (or similar).
• Cloud Security: Hands-on with AWS (GuardDuty, Security Hub, WAF), Azure (Security Center, Sentinel), GCP (SCC, IAM, VPC).
• OS & Infrastructure: Linux/Windows hardening, PowerShell/Bash scripting, database security (SQL, Oracle, Postgres).
• DevSecOps & Automation: Python/PowerShell scripting, IaC security (Terraform/Ansible), CI/CD pipeline security.
• Security Tools: Burp Suite, OWASP ZAP, Metasploit, Scout Suite, CloudSploit.

Soft Skills & Work Approach

• Strong communication skills – able to explain risks to both technical and non-technical stakeholders.
• Team player with a collaborative, global mindset.
• Resilient under pressure, with the ability to manage critical incidents calmly.
• Flexibility to support 247 operations when required.
• Problem-solving, analytical, and detail-oriented.
• Professional, ethical, and proactive approach to security, with awareness of ISO 27001:2022, change management, incident management, and cloud configuration standards.

Good to Have (Added Advantage)

• Experience with VAPT reports and remediation validation.
• Knowledge of BeyondTrust PAM administration.
• Familiarity with Microsoft Entra ID Governance.
• Awareness of AI/ML security risks (LLM/API exposure, adversarial risks).

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• 3–4 years of total experience, with at least 2 years hands-on in audits/security assessments.
• Preferred certifications: CompTIA Security+, CEH, ISO 27001 Internal Auditor, or Cloud Security Specialty (AWS/Azure/GCP).

Ready to take your cloud and configuration audit expertise to the next level?
Apply now and be part of a team driving global security excellence.