Cloud Security Product Owner

Client: One of our Client

Location: Pan, Preferred Bangalore

**Job Type**: Permanent

Immediate joiner (within 30 days max)

Job Role: Cloud Security Product Owner

**Technology Required**
- Endpoint Security Tools functionalities and structure, AWS Sys Ops, AWS Cloud Services and security on AWS

**What you need to have**:
Minimum experience of 6 years in engineering & operations of security & compliance of cloud systems is a must-have

Education pre-requisites:
A university bachelor's degree in Computer Science or Information Security or Cyber Security is a must-have

AWS Sys Ops certification and AWS Security Specialty certification is a plus

One or more certifications from any of the security education-credentialing institutes like GIAC, SANS Institute is a plus

Recruiting Team:
The recruiting team works on various security domains like Endpoint Security, Inventory Management, IAM, Threats & Vulnerabilities Management, Data Analytics & Sciences.

Prior Experience:
Must-Haves:
Excellent knowledge of AWS Cloud Services and security on AWS

Good knowledge of Operating Systems (Windows Servers & Clients, Linux Servers & Clients)

Good knowledge of networking concept (Security Groups, NACL's, routing, switching, proxy, firewall)

Understanding of common cloud IT issues

Understanding of MITRE ATTCK framework and being able to drive design of security controls from the various threats, actors and TTP

Understanding of Agile processes and principles

Must exhibit thought leadership in the cloud security space

Good communication and presentation skills

Proven success in contributing to a team-oriented environment

Proven ability to work creatively and analytically in a problem-solving environment

Preferred:
Good knowledge of Endpoint Security Tools functionalities and structure

Day-to-day responsibilities:
Understand the existing Sony Cloud Security standards and the controls in place

Review existing cloud security measures and processes, advising on best practices and recommendations based on leading industry insights.

Engage with other IT teams including Cloud Support Team, Application Teams and Security Teams to ensure a consistent approach for organizational support across the enterprise

Adhere to the Scaled Agile Framework methodologies and tools that exists in the environment

Participate in daily stand-up of Compliance & Security release train and contribute to bi-weekly sprints

Continuously learn and expand knowledge about cloud security

Continuously learn and expand knowledge about the architecture and weaknesses in cloud

Engage stakeholders to discuss the weaknesses and vulnerabilities and develop ideas & plans to improve security posture on cloud

Work closely with the Global Product Owner & stakeholders to translate the ideas & plans to agile constructs like Demand Items, Epics, User Stories

Work closely with the Global Product Owner & stakeholders to assess the value and develop business case

Be fluent in expressing the business case & it's realization in the language of business value, security risk, financial risk, risk mitigation, assumptions, agreements, issues, decisions, dependencies, resources & skill needs

Work closely with the Global Product Owner to prioritize demand items & epics to ensure work focuses on those with maximum value and are aligned with customer strategy

Work with the Architecture Group to translate the demand items & epics to requirements for the architectural runway

Work with the Architecture Group in running experiments, proof-of-concepts, proof-of-value and in validating the results

Work closely with other Product Owners (regional or other functions) and bubble up 'global' requirements & opportunities

Work closely with other Product Owners (regional or other functions) and drive delivery of mitigation for critical vulnerabilities

Providing direction & guidance to the Agile development team throughout the project and create requirements

Ensure that the agile team always has an adequate amount of user stories prepared for subsequent task break-down & delivery

Adhere to the Scaled Agile Framework methodologies and tools that exists in the environment

Participate in daily stand-up of Compliance & Security release train and contribute to bi-weekly sprints

Participate in the development of IT security & compliance roadmap and to-be state

Along with other product owners, form the core group that provides thought leadership in the IT Security space

Along with other product owners, run the global & regional collaboration & innovation forums & exercises

Success Factors:
Maintain regular communication with supervisor and continually update needs & priorities to the supervisor

Must maintain a positive & cordial relationship with all team members and stakeholders

Possess an assertive communication style, but be respectful to people & differences in opinion

Must be a good listener, but not be afraid to ask questions & seek clarifications

Be able to fu