Senior Cloud Security Specialist

Job Title: Cloud Security Architect

As a seasoned Cloud Security Architect, you will be responsible for ensuring the security posture of cloud environments by identifying and mitigating risks. You will conduct security assessments of GCP and other cloud environments (AWS), including applications and infrastructure.

Key responsibilities include:

• Collaborate with cloud application architects/developers, system/network administrators, and stakeholders to ensure secure cloud design.
• Review changes in Application Design and assess security controls, provide recommendations and validate the implementation of security controls across IAM, Network Security, Data Security and Infrastructure Security.
• Provide guidance on cloud security controls and ensure adherence to secure cloud practices.
• Work with key stakeholders across engineering groups to align architecture decisions with security requirements.

Strong expertise in cybersecurity principles and best practices is required. A thorough understanding of various security standards, framework, and certifications/attestations such as ISO 27001, HIPAA, HITRUST is essential.

• 10-12 years of experience in Information Security, specializing in reviewing cloud infrastructure and applications.
• Proficiency in Cyber Security Risk Assessment, Cloud Security Assessment, Defense in Depth, and Security Architecture patterns.
• Hands-on experience with Threat Modelling techniques such as STRIDE, PASTA, and familiarity with IAM, App Sec, SDLC, Data Security, Network Security, Encryption, Logging & Monitoring.
• Experience with Okta and Entra ID is preferable.
• Strong experience assessing and implementing security controls for GCP & AWS cloud platforms and resources.
• Strong experience assessing and recommending security controls for Container based applications.
• Experience in Assessing and Recommending Security controls for Data Analytics, Data Warehouse and AI based applications.
• Familiarity with GCP Command Center, AWS Security Hub and mitigating vulnerabilities.
• Experience with Cloud Access Security Broker, CSPM, CWPP, PaaS, and IaaS security requirements in Azure, GCP, AWS, and AKS.
• Individual handling of design/solution reviews across cloud and SaaS providers, ensuring security due diligence.
• Understanding of Cloud Security Alliance Cloud Control Matrix (CSM) and CSA Security guidance.
• Management of security projects and technical assessments across multiple geographies.
• Strong analytical and troubleshooting skills, along with excellent communication and interpersonal abilities.
• Experience with cloud infrastructure like GCP and AWS and familiarity with concepts like Zero Trust Architecture, Cloud Security, Firewall rule reviews, and Conditional Access.
• Scripting knowledge (e.g., Powershell) is advantageous, and CISSP and CCSP certifications are a plus.

As a member of our team, you will enjoy a range of benefits, including:

• A competitive salary package.
• The opportunity to work with a talented team of professionals.
• Professional development and growth opportunities.
• A dynamic and supportive work environment.

Additional information can be found below:

• Experience with cloud infrastructure like GCP and AWS and familiarity with concepts like Zero Trust Architecture, Cloud Security, Firewall rule reviews, and Conditional Access.
• Scripting knowledge (e.g., Powershell) is advantageous, and CISSP and CCSP certifications are a plus.