01Overview
Job Description:
Provide hands-on technical security engineering and security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure systems in the cloud (AWS, Azure or GCP).
Implement security controls and fine tune / baseline based on the risk criteria and continuously evaluate cloud infrastructure for new services / new emerging technologies to understand security requirements and implementation techniques.
Creation of automated tooling for cloud platforms to streamline / enhance security processes.
Develop and maintain cloud security standards in partnership with the cloud governance team.
Automate remediation and implement controls to avoid misconfiguration and ensure compliance.
Create and maintain Infrastructure as code to support the team w.r.t automation capabilities.
Collaborate with the cloud architecture and operations teams to automate and address security concerns.
Document and prepare Standard Operating Procedures based on security architecture.
Identify, analyze, and permanently fix repeat incidents (problem management).
Follow-up and coordinate with other cross-functional teams network, infra & security teams.
Handle multiple critical projects along with daily tasks, Create security policies to guardrail and keep banks cloud environments secure.
Create, discuss and release dashboards and reports periodically to management, business owners and relevant stake holders including the internal and external auditors.
Plan and Scheduling of infrastructure for calendar assessments, following up with application owners for details, tracking closures of the findings etc.
Co-ordinate and support vendors / partners w.r.t various project tracks related to cloud security.
Experience/Skills
Bachelor or Graduate Degree in any discipline.
Technical proficiency in AWS and Azure including solution architecture and relevant experience with AWS, Azure, Google Cloud Platforms.
Knowledge of Cloud Security Alliance (CSA) framework.
Knowledge on security concepts (data, network and cloud security).
Knowledge and/or experience of cloud security provider solutions, e.g. AWS security solutions, Azure security solutions, GCP security solutions.
Expertise in Cloud automation (Ansible, Ansible Tower, Terraform, Cloud Formation, Python, etc.).
Expertise using containers and server less computing (Docker, Kubernetes etc.), CI/CD pipeline tools such as Jenkins.
Good to have: Certification in AWS, Azure, GCP, CCSK, CCSP.
Sound understanding of security technologies, common security threats and industry best practices.
Strong project management skills (objective setting, communications, risk management, performance tracking, evaluation/measurement).
Self-starter; consistently energetic, positive and proactive.
Ability to convey technical information to senior management in a simple and unambiguous manner.
Excellent analytical, communication and presentation skills. .
