Security Engineer (1-year renewable contract)

Job Responsibilities

.Conduct validation of security controls and test their effectiveness across various cloud platforms and services.

.Design, implement, and sustain cloud security measures that align with established security architecture frameworks.

.Facilitate the adoption of security-by-design methodologies throughout cloud infrastructure and application development.

.Evaluate cloud environments to ensure compliance with internal security policies, established security baselines, and regulatory standards.

.Configure and oversee cloud-native security services, monitoring functionalities, and security automation solutions.

.Analyze cloud configurations to detect security vulnerabilities, misconfigurations, and compliance deficiencies.

.Work in conjunction with Security Architects to convert security requirements into actionable technical controls and operational protocols.

.Assist in vulnerability management processes, including tracking remediation efforts and verifying the effectiveness of corrective measures.

.Engage in cloud security risk assessments and propose strategies for risk mitigation.

.Perform security control evaluations for new cloud services, infrastructure setups, and technology deployments.

.Create security standards, operational procedures, and technical documentation pertinent to cloud security.

.Aid in security incident investigations, offering technical insights during containment and remediation efforts.

.Implement automation for security checks, compliance monitoring, and reporting wherever feasible.

.Stay informed about emerging cloud security threats, vulnerabilities, and industry best practices, suggesting enhancements as needed.

Job Requirements

.3-7 years of experience in cloud security, cybersecurity, or infrastructure security roles.

.Deep knowledge of cloud security principles and architectures, particularly within Google Cloud Platform or Azure.

.Hands-on experience with the implementation and validation of cloud security controls.

.Familiarity with cloud-native security services, identity and access management (IAM), network security, encryption, logging, and monitoring technologies.

.Comprehension of security frameworks and standards including NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.

.Experience with tools for vulnerability management and security assessments.

.Skilled in developing Infrastructure as Code (IaC) and knowledgeable about DevSecOps security practices.

.Excellent analytical, problem-solving, and troubleshooting capabilities.

.Competency in documenting technical findings and effectively communicating security risks to both technical and non-technical audiences.