Architect and implement security solutions across multiple cloud environments (AWS, Azure)
Monitor the cloud security posture, suggest improvements, and help guide the cloud infrastructure security program’s future
Partner with platform engineering and development teams to adopt security standards across a range of areas, including Container Security, Infrastructure as Code, Identity and Access Management, Resource Policies, Virtual Host Security, and Data Protection
Provide security guidance to development teams supporting client solutions
Responsible for coordinating security enhancements and deployment efforts for implementing client solutions.
Assist with the implementation and management of cloud and on-premise security tools
Strong AWS Cloud knowledge (IAM, VPC, Security Groups, S3, KMS, etc)
Demonstrated experience with evaluating identity-based policies, resource-based policies, access control lists (ACLs), permissions boundaries, and Service control policies
Hands-on experience with DevSecOps with a focus on container and orchestration security
Experience with Cloud Native Application Architectures and their associated security risks
Experience with integration and management of holistic cloud security monitoring solutions
Hands-on experience implementing secure configurations for AWS-managed services
Ability to architect solutions across cloud services to auto-remediate risks
Bachelor’s degree in information security or equivalent experience
One or more security certifications, such as AWS Certified Security Specialty or able to obtain one within 6 months of hire
3 years of experience in one or more of the following areas:
• DevSecOps
• Cloud Security
• Vulnerability Management
• Platform and Infrastructure engineering
• Product Security