Cloud Security Engineer Offline

Responsibilities:

• Ensure security of all assets in the cloud by integrating security best practices for identity-based security

• Deploy cloud security tools to protect and monitor access.

• Assist in the development and enforcement of the Cloud Security Standard

• Build and deploy new information security services and capabilities in both AWS and MS Azure

• Automate various cloud information security processes

• Lead security activities when reducing or shutting down existing facilities to ensure all security requirements are fulfilled

• Identify Potential Threats and vulnerabilities and lead the mitigation of identified threats

• Lead the deviation process for assigned area and ensure the deviation process is understood and followed

• Assist with Security Deviation Audits

• Lead activities that help determine security architecture

• Make judgments on whether security events are incidents and initiate Incident Response process when necessary

• Perform advanced security incident investigation and event correlation analysis in sensitive and complex investigations and circumstances

• Analyze security violation reports for suspicious and dangerous activity

• Determine requirements for environment analysis such as: port scanning, vulnerability assessment tools, which tools are prohibited, etc

• Approve security device tuning and filtering requests and ensure no negative impact to enterprise

·

Requirements:

• At least 5 years of experience in Cloud Software Security

• Significant experience and understanding in two or more of the following areas: AWS or Azure security best practices, security technologies and tools

• Forensic investigation and incident response tools and processes, IT technologies and tools (Networking, Systems, Applications, Databases, etc.)

• Security services or program management

• Global experience and working with different cultures is required

• Excellent documentation skills

• Two or more of the following, or similar certifications is preferred and one required: CCNA, MCSE, CISSP, GIAC, CISM, or security tool certification