Cloud Security Specialist

We are seeking a skilled Cloud Security Specialist to join our team. This role involves performing comprehensive security assessments and audits of our infrastructure, identifying and mitigating potential security gaps and weaknesses.

Responsibilities:

• Conduct thorough security assessments and audits of our infrastructure, identifying and addressing potential security risks and vulnerabilities.
• Proven expertise in using Terraform and other infrastructure as code tools, managing vulnerabilities, policies, and implementing best practices for cloud security.
• Collaborate with engineering teams to understand and resolve security incidents that arise on their services, ensuring minimal disruption to business operations.
• Conduct in-depth security reviews of application code, working closely with developers to ensure secure coding practices from the outset and address issues early during coding and testing phases.
• Experience with Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST), with the ability to address real-world challenges in these areas.
• Implement and manage security tools within the Continuous Integration/Continuous Deployment (CI/CD) pipeline, focusing on DevSecOps practices to enhance security and efficiency.
• Monitor and analyze logs, events, and metrics to identify security incidents, potential breaches, and emerging threats, providing actionable insights for improvement.
• Understand runtime security, image scanning, network security, access control, host OS hardening, and vulnerability management in the container lifecycle, ensuring robust security throughout the development process.
• Develop and maintain incident response plans, procedures, and playbooks for effective handling of security incidents and breaches, minimizing business impact.
• Design, implement, and maintain security measures for our cloud infrastructure, including virtual private clouds (VPCs), security groups, identity and access management (IAM) roles, and access controls, ensuring compliance and optimal security.
• Maintain security hardening configurations and guidance for the diverse set of services available across our cloud environments, ensuring consistent security standards.

Requirements:

• 5+ years of Security Engineering experience preferably in AWS Cloud and at least 2 of the following areas: cloud security, web application security, incident response, threat hunting, and cyber security operations.
• Bachelor's degree in Computer Science, Information Security, or a related field. Equivalent work experience may be considered.
• Strong knowledge of security principles, best practices, and common vulnerabilities (e.g., OWASP Top 10)
• Familiar with SAST, DAST, Fuzzing, and other security testing tools.
• Experience with Wiz, Prisma Cloud, Jira, Confluence & Terraform / CloudFormation (Infrastructure as a code)
• Familiarity with CI/CD tools such as GitHub Actions, Jenkins or CircleCI.
• Experience with security technologies, such as firewalls, intrusion detection/prevention systems (IDS/IPS), security information and event management (SIEM) systems, data loss prevention (DLP), antivirus software, and vulnerability scanners.
• Good understanding of cloud security architecture, security assessments, audit standards for the Cloud, security threats in the cloud.
• Solid understanding of network protocols, TCP/IP, and network security concepts.
• Ability to work independently and problem solve.

Preferred Qualifications:

• Automation experience with AWS. Relevant certifications such as AWS Certified Security - Specialty, CISSP, CEH are highly desirable.
• Experience in a global fast-moving environment covering multiple time zones.
• Passion in all things security.
• Stay updated with the latest security trends & AI technologies.