Cloud Security Operations

Job Description:

As a Cloud Security Operation Team, we partner with our clients to provide Cloud security assurance by providing services such as config drift management, compliance reporting, Cloud eco-system scanning, container security and policy as code controls.

As a member of the Cloud Security Operation

#Providing security recommendations and solutions for migrating and new applications in our company environment across multiple Cloud providers including, but not limited to, Azure and AWS

#Running security solutions in the public cloud for monitoring and detection of vulnerabilities #Own a portfolio of security tools designed to provide leading security platform capabilities

#Identify and monitor security risks at large scale

#Work with partners to establish the direction of the program, including defining priorities, coordinating with peer team.

#Leading continuous improvement efforts of our security tools and systems

#Come with a growth mindset of excellent analytical, engineering and communication skills

#Collaborate and understand the needs and problems of our business lines

#Working in a globally distributed team to provide innovative and robust Cloud-centric security solutions

Skill Required

#Expert knowledge of the Shared Responsibility Model; keen understanding of the security risks inherent in hosting cloud-based applications and data

#Experience on cloud vulnerability management or integrating vulnerability management tools into CI/CD pipeline

#Experience providing requirements for securing cloud workloads and applications

#Technical knowledge on Automation, configuration and provisioning infrastructure-as-code using Terraform, ARM, or Cloudformation

#Experience on container and orchestration such as Kubernetes, EKS, AKS, Docker, OpenShift

#Familiarity with standard cloud security tooling such as Amazon Guardduty, Security Hub, Azure Security Center, and Microsoft Cloud App Security (MCAS)

Skill Desired

# Understanding of current risks and threats to use of public cloud

#Working knowledge of a scripting and programming languages

#Knowledge of information security controls.

#CI/CD pipelines and how to integrate and operate security tools within the pipeline.

#Understanding of vulnerability assessments across all layers of the network/host/application stack.

#Configuration management and patch management using automated tools.

#Vulnerability scanners (Qualys, AWS Inspector, Azure Security Center) and container scanning tools (Twistlock, Aqua).

This role requires that all successful applicants be fully vaccinated against COVID-19 as a condition of the engagement and provide proof of such vaccinations within 3 days of