Technical Consultant – Netskope

Hello,

Greetings for the day !!!

We are hiring "Security Engineer L2 - Netskope" for one of our client based at Navi Mumbai !!!

Location: Ghansoli

Designation: Security Engineer L2 (Netskope)

Job Description:

Design and implement Netskope SSE/SASE solutions.

• Configure and manage Netskope policies, traffic steering, SSL/TLS inspection, and cloud security controls.
• Deploy and support Netskope Client on Windows, macOS, and mobile devices.

Implement and manage:

• CASB (Cloud Access Security Broker)
• SWG (Secure Web Gateway)
• DLP (Data Loss Prevention)
• ZTNA (Zero Trust Network Access)
• Cloud Firewall and DNS Security
• Monitor security incidents and investigate security alerts.
• Integrate Netskope with identity providers such as Microsoft Entra ID (Azure AD), Okta, and Active Directory.
• Perform troubleshooting, policy tuning, and performance optimization.
• Prepare security reports, documentation, and standard operating procedures.

Required Skills:

• Netskope SSE/SASE Platform
• CASB, SWG, DLP, ZTNA
• Network Security and Cloud Security
• HTTP/HTTPS, DNS, VPN, Proxy technologies

Experience: 3+ years

Working days: Monday to Friday

**LOOKING FOR IMMEDIATE JOINERS ONLY**

Senior Network Security Engineer – ZTNA (Zscaler, Axis/HPE SSE Focus)

• ZTNA and Zero Trust Implementation: The role involves architecting and deploying ZTNA solutions using platforms like Zscaler and Axis Security, replacing traditional VPNs with identity-aware access, enforcing least-privilege models based on user identity, device posture, and application context, and integrating with identity providers and security tools to secure remote workforces and third parties. Migration from VPN to ZTNA is a key responsibility. 

• Network Security Architecture and Operations: The engineer participates in architecture reviews, designs secure environments across data centers, cloud, and edge, provides risk and telemetry analysis, supports audits and compliance, manages SIEM systems, and collaborates with global cybersecurity and infrastructure teams to maintain security posture. 

• Technical Expertise and Qualifications: Required qualifications include over 10 years of experience in network security engineering, hands-on expertise with Zscaler (ZIA, ZPA), Axis Security/Aruba SSE, deep knowledge of Zero Trust, SASE frameworks, firewall and proxy technologies, identity integration, cloud security across AWS, Azure, and GCP, and certifications such as CCNP, CCIE, Zscaler certifications, and CISSP or CISM. 

• Role Focus and Strategic Importance: The position emphasizes transitioning from traditional network security to identity-driven access security, positioning ZTNA as a core transformation pillar replacing VPNs, aligning with enterprise Zero Trust initiatives, enabling secure hybrid workforces, and balancing expertise in both modern cloud security platforms and traditional network controls.

Job Description: Senior Cyber Security Consultant

Experience: 5+ Years

Role: Senior Cyber Security Consultant – VAPT & Security Compliance

Employment Type: Full-Time

Job Overview

We are looking for an experienced Cyber Security professional with 5+ years of hands-on experience in VAPT, security assessments, cloud security, Active Directory security, and compliance. The candidate will be responsible for conducting security assessments, identifying risks, ensuring compliance with security standards, and providing remediation guidance to clients.

Key Responsibilities

• Conduct Web Application, API, Network, Infrastructure, and Mobile Application VAPT.
• Perform internal and external penetration testing and Active Directory security assessments.
• Identify, validate, and document security vulnerabilities with remediation recommendations.
• Conduct Cloud Security assessments across AWS, Azure, and GCP environments.
• Perform security audits, risk assessments, and compliance gap assessments.
• Assist clients in implementing security controls and meeting compliance requirements.
• Prepare detailed technical reports and executive-level security assessment reports.
• Lead security assessments and coordinate with clients and internal teams.
• Review security configurations, architecture, and technical controls.
• Provide guidance and mentorship to junior security engineers.

Technical Requirements

• 5+ years of hands-on experience in Cyber Security, VAPT, and Security Assessments.
• Strong understanding of OWASP Top 10, API Security, and common attack methodologies.
• Expertise in Active Directory security, privilege escalation, and internal network penetration testing.
• Strong knowledge of Linux, Windows, Networking, and security technologies.
• Experience with Cloud Security assessments (AWS/Azure/GCP).
• Familiarity with tools such as Burp Suite, Nmap, Nessus, Metasploit, BloodHound, and Kali Linux.
• Strong vulnerability analysis, exploitation, and remediation skills.

Compliance & Security Frameworks

• Knowledge and experience with ISO 27001/27002.
• Understanding of SOC 2 requirements and security controls.
• Familiarity with PCI DSS, NIST Cybersecurity Framework, and CIS Benchmarks.
• Experience in security audits, compliance assessments, risk management, and control validation.
• Ability to assist in compliance documentation, evidence collection, and remediation tracking.
• Knowledge of GDPR and other relevant security and privacy regulations is an advantage.

Preferred Certifications

• OSCP / OSCP+
• CEH / CEH Master
• CISSP
• CISA / CISM
• ISO 27001 Lead Auditor / Lead Implementer
• CREST or other relevant security certifications

Candidate Expectations

• Strong analytical, problem-solving, and communication skills.
• Ability to independently manage security assessments and client engagements.
• Experience in technical report writing and presenting security findings.
• Ability to work with cross-functional teams and provide actionable security recommendations.
• Demonstrated practical knowledge through real-world projects and assessments.

WowPe is a leading fintech company revolutionizing the way businesses handle financial transactions. Our suite of innovative products includes a secure Payment Gateway for seamless online transactions, robust Payouts solutions to streamline bulk payments, and a versatile Point of Sale (POS) system for efficient in-store transactions. At WowPe, we’re dedicated to providing user-friendly, scalable, and reliable solutions that empower businesses to grow and succeed in today’s fast-paced digital economy.

We are looking for a highly skilled Cloud Infrastructure & Cloud Network Engineer to design, build, and manage secure, scalable hybrid cloud environments at WowPe. This role will focus on cloud networking, hybrid connectivity, infrastructure automation, security, reliability, and performance across on-prem and cloud platforms (AWS/Azure). You will play a critical role in ensuring high availability, security, and performance of our fintech platforms.

A Day in the Life

• Design and review cloud network architectures (VPC/VNet, routing, segmentation)
• Troubleshoot latency, connectivity, VPN, and performance issues
• Work with DevOps and application teams to support deployments and scalability
• Automate infrastructure provisioning and security guardrails
• Monitor network health, traffic flow, and system performance
• Ensure security, compliance, and disaster recovery readiness
• Support hybrid connectivity between on-prem data centers and cloud environments.

Key Responsibilities

Cloud Networking & Hybrid Architecture

• Design and implement VPC/VNet architectures, subnetting, routing tables, NAT, gateways, and secure segmentation
• Build and manage hybrid connectivity between on-prem data centers and cloud using Site-to-Site VPN, ExpressRoute, Direct Connect
• Configure and manage Layer 4 & Layer 7 load balancers for high availability and traffic distribution
• Architect DNS, CDN, and edge networking strategies for low-latency global access

Security & Zero-Trust

• Implement Zero-Trust networking using security groups, NACLs, identity-aware proxies, mTLS
• Design secure access controls and network isolation
• Work closely with security teams to ensure PCI, ISO, SOC compliance readiness

Automation, Platform & Reliability

• Automate infrastructure provisioning using Infrastructure as Code (Terraform/ARM/CloudFormation)
• Build self-healing, auto-scaling architectures with health checks and fault tolerance
• Support and manage Kubernetes clusters (EKS/AKS) including networking and service communication
• Integrate infra with CI/CD pipelines for safe and frequent deployments

Operations & Observability

• Perform advanced troubleshooting for latency, packet loss, MTU, routing loops
• Implement and manage monitoring, logging, and observability (Prometheus, Grafana, ELK, Azure Monitor, CloudWatch)
• Design and maintain disaster recovery architectures, multi-region networking, and replication strategies
• Ensure high availability, performance optimization, and cost efficiency

Basic Qualifications & Skills

• 4+ years of experience in Cloud Infrastructure & Cloud Networking
• Strong hands-on experience with AWS and/or Azure
• Deep understanding of VPC/VNet, routing, NAT, gateways, load balancers, DNS
• Experience with Hybrid connectivity (VPN, ExpressRoute, Direct Connect)
• Solid knowledge of network security, firewalls, access control, segmentation
• Hands-on experience with Infrastructure as Code (Terraform preferred)
• Experience in monitoring, troubleshooting, and incident handling
• Strong understanding of high availability, DR, and performance optimization

Preferred Qualifications

• Experience in fintech, BFSI, or high-compliance environments
• Exposure to Zero-Trust architecture and security best practices
• Experience with Kubernetes (EKS/AKS), service mesh, microservices networking
• Familiarity with CI/CD pipelines and DevOps practices
• Knowledge of CDN, edge networking, and global traffic management
• Experience with compliance frameworks (PCI-DSS, ISO 27001, SOC2)
• Ability to design large-scale, resilient, production-grade architectures

Key Responsibilities

·       System Design: Design secure, scalable, and highly available multi-tenant cloud-based application architectures.

·       Integration Strategy: Build robust APIs, webhooks, and data pipelines for complex enterprise client connections.

·       Technical Guidance: Mentor software engineers and lead critical code and architecture reviews to ensure engineering excellence.

·       Performance & Security: Drive non-functional infrastructure needs including high uptime, strict data privacy compliance, and fast application response times.

·       Cross-Functional Collaboration: Partner closely with Product, Security, and Customer Success teams to align technical execution with business roadmaps.

Required Qualifications

·       Experience: 8+ years of experience in software engineering with at least 3+ years operating as a technical or solutions architect within a B2B SaaS environment.

·       Cloud & DevOps: Deep production knowledge of major cloud infrastructure (AWS, GCP, or Azure), containerization technologies (Docker, Kubernetes), and modern CI/CD automation pipelines.

·       Architecture Patterns: Proven expertise designing microservices, event-driven architectures, and high-performance relational and NoSQL database structures.

·       Communication: Strong written and verbal communication skills, with a proven ability to translate complex technical concepts clearly to both engineers and business stakeholders.

·       Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical work experience).

Preferred Skills

·        Prior experience managing architectural frameworks for enterprise compliance frameworks like SOC2, ISO 27001, or GDPR.

·        Background in building real-time data processing engines, stream frameworks, or integrating enterprise AI/ML components.

Job Summary

We are looking for an experienced Network Engineer with strong hands-on expertise in enterprise networking, cloud networking, network security, routing, switching, and troubleshooting. The candidate will be responsible for designing, implementing, maintaining, and optimizing secure and highly available network infrastructure across on-premises and cloud environments.

Key Responsibilities

• Design, configure, and manage enterprise network infrastructure, including routers, switches, firewalls and load balancers.
• Configure and troubleshoot routing protocols such as BGP, OSPF and static routing.
• Manage LAN, WAN, VLANs, VPNs, subnets, NAT, DNS and DHCP.
• Implement and support cloud networking across AWS and Azure, including VPC, VNet, route tables, Network Security Groups (NSGs), security groups and private endpoints.
• Configure site-to-site VPNs, remote-access VPNs, AWS Direct Connect and Azure ExpressRoute.
• Troubleshoot network connectivity, latency, packet loss, MTU issues and routing problems.
• Monitor network performance, availability and capacity using network monitoring tools.
• Implement network security policies, firewall rules, access controls and segmentation.
• Support hybrid cloud connectivity and on-premises-to-cloud network migration.
• Collaborate with infrastructure, cloud, security and application teams to resolve network incidents.
• Perform root cause analysis (RCA), document network configurations and maintain operational runbooks.
• Support change management, disaster recovery and high-availability requirements

📢 We're Hiring | Cybersecurity Consultant | Gurugram

Role: Cybersecurity Consultant

Experience: 7+ Years

Location: Gurugram, Haryana

We are looking for experienced cybersecurity professionals with strong hands-on expertise in security operations, infrastructure security, vulnerability management and incident response.

🔹 Key Responsibilities

• Manage and strengthen security controls across enterprise IT infrastructure.
• Perform vulnerability assessments, remediation tracking and patch management.
• Monitor security alerts, investigate incidents and support threat hunting.
• Implement and manage SIEM, EDR and endpoint security solutions.
• Work on IAM controls, including MFA, SSO, RBAC and privileged access management.
• Support network security, including firewalls, IDS/IPS, segmentation and secure remote access.
• Assist with backup, recovery, disaster recovery and business continuity activities.
• Maintain security documentation, remediation evidence and audit compliance.

🔹 Required Skills

• 7+ years of relevant experience in cybersecurity, security engineering or security operations.
• Hands-on experience with SIEM tools such as Microsoft Sentinel, Splunk, QRadar or ArcSight.
• Knowledge of Microsoft security technologies, including Defender and Entra ID, is preferred.
• Experience with vulnerability management tools such as Tenable, Qualys or CrowdStrike Falcon.
• Strong understanding of incident response, threat hunting, network security and security remediation.
• Experience with EDR, IAM and enterprise security controls.

⭐ Preferred: OT/ICS security, IEC 62443, NIST frameworks, backup/DR and network segmentation experience.

📩 Interested candidates: Please share your updated cv at: snigdhaattheratebeanhr.com

Senior Network Security Engineer (Microsegmentation) 

Key Responsibilities 

• Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. 
• Develop and support comprehensive solutions that meet requirements and align with HPE’s global network security and microsegmentation strategy. 
• Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models. 
• Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. 

Microsegmentation & Zero Trust Responsibilities 

• Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. 
• Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. 
• Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation. 
• Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. 
• Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. 
• Lead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation). 
• Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). 

Core Network Security Responsibilities 

• Participate in network security design reviews and ensure all implementations meet enterprise security standards. 
• Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments. 
• Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting. 
• Conduct and support internal and external security audits and compliance assessments. 
• Maintain awareness of emerging threats and update policies accordingly. 
• Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. 
• Manage and optimize Security Information and Event Management (SIEM) systems. 
• Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. 

Technical Qualifications 

• 10+ years of experience in enterprise network security architecture, engineering, and operations. 

Microsegmentation & Advanced Security 

• Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. 
• Proven capability to build application-aware segmentation policies based on traffic flow analysis. 
• Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. 
• Understanding of east-west traffic inspection, workload protection, and software-defined segmentation. 
• Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. 

Network Security & Infrastructure 

• Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC. 
• Expertise in firewall architecture and design with hands-on experience in:  
• Fortinet (Fortigate), Palo Alto, Juniper 
• Policy design, NAT, routing, application control, and threat prevention profiles 
• Experience securing public and private cloud (AWS, Azure, GCP) environments. 
• Design and implementation of Web Application and API Protection (WAAP) solutions. 
• Strong experience in proxy (forward/reverse), load balancing, and application security integration. 
• Experience with SDN and SD-WAN architectures, including segmentation use cases. 

Networking & Protocol Expertise 

• Strong knowledge of:  
• Routing protocols: BGP, OSPF, RIP, MPLS 
• Network services: DNS, DHCP, NTP 
• IPv4/IPv6 architecture and traffic management 
• Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants). 
• Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions. 

Data Center & Infrastructure 

• Experience managing enterprise data center environments with technologies including:  
• Aruba, Arista, Juniper switching 
• Firewalls, WAN optimization, IDS/IPS, DLP 
• Strong understanding of structured cabling and network facilities. 

Operations & Lifecycle Management 

• Plan, implement, and document infrastructure changes, including upgrades and migrations. 
• Work within ITIL frameworks for incident, change, and problem management. 

Education & Certifications 

• Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). 
• 10+ years of experience in global network security environments. 
• Preferred certifications:  
• CCNP / CCIE 
• JNCIE 
• Security certifications (CISSP, CISM, or equivalent) are a plus 

Key Differentiators Added (for your context) 

This version strengthens the JD by: 

• Embedding microsegmentation as a core capability (not just one bullet) 
• Aligning with Zero Trust and application dependency mapping (important for your programs) 
• Emphasizing cross-team collaboration with application owners (critical for rollout success) 
• Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing) 

Lead Data Security Solution Engineer

Exp: 10+ years

Rate: 35 LPA

Location: Remote

Time zone: ET (US Eastern time)

Shift: Night Shift

Type: Fulltime​

Responsibilities:

1. Technical and Database Assessment

Review Data In-Licensing requirements, workflow maps, data flows, data lineage, entitlement rules, and dependency records.

Assess relational database platforms, schemas, connectivity methods, interfaces, drivers, service identities, query patterns, and downstream consumption.

Identify where licensed data is stored, transformed, replicated, extracted, cached, archived, or backed up.

Assess current database security capabilities and identify gaps, constraints, risks, and prerequisites.

2. Data-Level Authentication and Identity Integration

Assess authentication for named users, service identities, workloads, and analytical tools accessing databases.

Evaluate OAuth/OIDC or other identity- and token-based authentication directly to the database where supported by the selected technology.

Design integration between enterprise identities, security groups, project groups, database principals, roles, and policy engines.

Reduce reliance on shared or long-lived credentials where feasible and define secure credential or token handling for unavoidable exceptions.

Align with tools currently available and identify gaps if any,

3. Fine-Grained Authorization and Data Firewalling

Design database-level controls that restrict access to explicitly authorized users, groups, services, projects, or licensing populations.

Design and implement row-level security, column-level security, dynamic masking, views, policy-based filtering, or equivalent controls as appropriate.

Define isolation patterns for different licensed datasets and agreements while preserving permitted platform use for other users.

Ensure controls are consistently enforced as close to the data layer as technically feasible and are not solely dependent on application logic.

4. Auditing, Monitoring, and Traceability

Design database auditing to capture who accessed data, what was accessed, when access occurred, and which identity or service was used.

Define logging for queries, exports, failed access attempts, permission changes, and privileged activity where supported and required.

Integrate audit telemetry with appropriate monitoring and reporting capabilities and define retention and evidence requirements.

Validate that audit records are searchable, attributable, protected from inappropriate modification, and useful for investigation.

5. Data Lifecycle, Revocation, and Deletion

Design controls for access revocation when users change roles, leave a project, or when licensing rights expire.

Design methods to identify and remove licensed data from primary stores and relevant downstream copies, extracts, caches, or derived stores.

Address deletion implications for referential integrity, backups, archives, replication, recovery processes, and downstream consumers.

Define validation, exception handling, and evidence mechanisms to demonstrate that required deletion activities were completed.

6. Solution Architecture and Engineering

Translate requirements into current-state and target-state architectures, technical specifications, security patterns, and implementation plans.

Compare solution options and document trade-offs across security, feasibility, performance, scalability, operability, cost, and technology constraints.

Define database connectivity, policy-enforcement, identity, audit, monitoring, lifecycle, and integration components.

Collaborate with database, IAM, security architecture, infrastructure, application, data platform, governance, and scientific teams.

7. POC Design and Execution

Select suitable relational database and workflow candidates that represent Data In-Licensing scenarios and material technical risks.

Define POC architecture, test data, test identities, success criteria, negative tests, performance considerations, and rollback approach.

Implement and validate identity-based authentication, fine-grained authorization, data firewalling, auditing, access revocation, and deletion scenarios.

Document outcomes, limitations, operational considerations, reusable patterns, and recommendations for broader adoption.

What we expect:

Expected Deliverables

Technical assessment of databases, integrations, identities, and data flows

Current-state database security and capability assessment

Target-state data security architecture and detailed technical design

Database authentication and identity-integration design

Row-level, column-level, masking, and policy-enforcement design

Data firewalling and licensed-dataset isolation pattern

Audit, monitoring, traceability, and reporting design

Access revocation, retention, lifecycle, and deletion design

Solution options, feasibility, gap, dependency, and risk assessment

POC architecture, implementation, test results, and recommendations

Reusable implementation patterns and operational handover documentation

Required Technical Skills and Experience

Strong hands-on experience with relational databases, SQL, database architecture, schemas, roles, privileges, and access paths.

Practical experience implementing database-level authorization, including row-level and column-level controls or equivalent fine-grained mechanisms.

Strong knowledge of database authentication, IAM, OAuth 2.0, OIDC, tokens, service identities, workload identities, and secrets management.

Experience designing secure database connectivity and integrations for applications, analytical tools, APIs, ETL/ELT, and data pipelines.

Experience with database auditing, query/activity monitoring, centralized logging, alerting, and investigation support.

Understanding of data lineage, lifecycle, retention, revocation, deletion, backup, archive, and recovery implications.

Ability to evaluate heterogeneous database technologies and design platform-appropriate controls.

Strong architecture, engineering, troubleshooting, documentation, and stakeholder-collaboration skills.

Nice to have:

Experience with enterprise data platforms, cloud or hybrid databases, data catalogs, access governance, and policy-enforcement technologies.

Experience in pharmaceutical research, scientific data, intellectual property protection, data licensing, or another regulated environment.

Experience designing and executing security POCs and converting validated patterns into production-ready designs.

Knowledge of privacy, contractual-use restrictions, segregation, and evidence requirements affecting licensed data.

About Us

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player with top-tier clients, favorable revenue mix, strong financial performance, and robust management. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. We offer quality of work, opportunities to learn new platforms/technologies that will help young engineers put themselves ahead in their careers compared to their peers in the IT Services industry. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

The organization is built to scale with strong external/ internal tech capabilities and governance standards. Started in 2019, CLOUDUSUFI is a family of 250 members working towards a common goal of making the enterprise data dance.

To know more, please visit https://cloudsufi.com

Our Values

We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.

Equal Opportunity Statement

CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/

Role : Full-Time Individual Contributor (IC)

Reporting to : Solution Architect / Program Manager

Location : India Remote (Quarterly visits to Noida office)

Shift : 2PM-11PM IST

12x5 (On call duty)

Experience : 8-14 Years

ABOUT YOU

• 5+ years’ experience with AWS orchestration via Terraform script
• 5+ years’ experience with CloudWatch/CloudTrail/Guard Duty
• 5+ years’ experience with AWS WAF
• 4+ years’ experience with CloudFlare
• 3+ years’ experience with DataDog
• Experience with PagerDuty
• Ability to make nuanced threat assessments
• Experience in SOPHOS.
• Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes
• Experience in Infrastructure As Code – Ansible / Terraform/ CloudFormation
• Hands-on experience implementing various security tools in CI/CD pipeline
• Strong experience with any cloud service provider (AWS Preferred)
• Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.
• Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.
• Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams (development and operations).
• Penetration testing and container security.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement
• Creating and managing security strategies
• Oversee information security audits, whether performed by organization or third-party personnel
• Develop, maintain and publish up-to-date information security policies, standards and guidelines.
• Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

ABOUT THE ROLE

• Work independently with vendors and collaborate with colleagues
• Experience negotiating remediation timelines and/or remediate found issues independently
• Ability to implement vendor platforms within CI/CD pipelines
• Experience managing/responding to incidents, collecting evidence, and making decisions.
• Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications’ needs
• Multitasking and continuous ability to provide a high level of concentration for assigned projects.
• Good working knowledge of AWS security in general and familiarity of the AWS native security tools
• The candidate should be experienced and articulate, who is not going to get discouraged, despite meeting roadblocks, and will continue promoting security within the company.
• Ability to create DevSecOps security requirements while working on a project
• Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers