Cloud Security Engineer

Greetings from Netsach - A Cyber Security Company.We are looking for Cloud Security Engineer /VAPT Cloud Security with 4 to 8years of strong exp. This is a full-time onsite opportunity for Dubai location. Mandatory Key Skills Application Security, VAPT Cloud Security, Security Code review, API security, Platform security, IAST, SAST, DAST, Infrastructure security and Cloud Security MS Azure. Cloud Security Specialist.Tools and Technologies Expertise in Azure Security Center and Azure Policies, Burp Suite, Nessus, Checkmarx, Kubernetes, Docker, Jenkins, GitHub, OpenShift and good knowledge about micro service architecture and pipeline driven security.Job Title: Cloud Security Engineer /VAPT Cloud SecurityExp: 4+ to 8yrsWork Type: Full-TimeJob Location: Dubai - OnsiteInterested candidates please share your resume at and please register & login at and send us your resume.Job DescriptionThe units primary purpose is to Design, Engineer & eventually Embed practical & balanced cyber / information security principles/patterns/controls into all products and platforms. Conduct security assessments, gap analysis, provide remediation to the relevant squads / stakeholders.2.Job Purpose (Why does the job exist? What is the unique contribution made by the job holder?)Primary/General Job Purpose: Encourage Shift Left Mindset - Proactively embed security requirements, by influencing implementation of security & privacy patterns from the start of the development cycleImplement via Influence - Influence stakeholders such as Product Owners, Solution Architects, Developers,Testers, Engineers & others to include security patterns into features, epics and stories in order to build secure, innovative & superior digital products for customers and employeesAssessments Perform security assessment and perform gap analysis to provide appropriate remediations to the teams for implementing the fixes.Key Skills Application Security, Security Code review, API security, Platform security, IAST, SAST, DAST, Infrastructure security and Cloud Security MS Azure.Tools and Technologies Expertise in Azure Security Center and Azure Policies, Burp Suite, Nessus, Checkmarx, Kubernetes, Docker, Jenkins, GitHub, OpenShift and good knowledge about micro service architecture and pipeline driven security.Experience with following Components:3.Technical RequirementsApplication Security Assessment Skillset1.Web Application Security2.Security Code Review3.Azure and AWS Cloud Security config review4.Azure Virtual Desktop - AVD Security Review5.Container Review6.WAF rules reviewAzure SecurityExperience with following Components: 1.Azure Security Center2.Azure AD RBAC3.Privileged Identity Management4.Conditional Access Policies5.Azure Advanced Threat Protection6.Azure Information Protection and HYOK7.Enterprise mobility with Intune MAM and MDM Policies8.Office365 ATP and Mail-flow9.Microsoft cloud threat intelligence10.Microsoft Cloud Application Security CASB setup and monitoring11.Windows Defender ATP12.Policy configuration for Onedrive, Sharepoint, Outlook, Teams and Office Pro Plus13.Azure AD Hybrid Join and Password Hash Sync14.Customer Lockbox and advanced compliance policies in Azure cloud15.AIP Data classification and reviewing DLP policiesSoft Skills:Ability to collaborate with multiple stakeholders and manage their expectations from a security perspectiveHolistic thinking; must balance security and functionality using practical demonstr able examples. Must also contribute to and implement good architecture principles to lower technical debtAssertive personality; should be able to hold her/his own in a project board or work group settingSuperlative written and verbal communication skills; should be able to explain technical observations in an easy-to-understand mannerAbility to work under pressure and meet tough/challenging deadlinesInfluencer- must be able to convince various stakeholders (internal IT Teams, C-Level execs, Risk & Audit) of why a certain observation is a concern or notThank YouEmily JhaNetsach - A Cyber Security Company