Job responsibilities
- Executes security solutions design, development, and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security requirements for internal clients (e.g., product, platform, application owners)
- Creates secure and high-quality production code and maintains algorithms that run synchronously with appropriate systems
- Applies specialized tools (e.g., vulnerability scanner) to analyze and correlate incident data to identify, interpret, and summarize the probability and impact of threats when determining specific vulnerabilities
- Leads delivery of continuity-related awareness, training, educational activities, and exercises
- Adds to team culture of diversity, equity, inclusion, and respect
Required qualifications, capabilities, and skills
- Formal training or certification on Security Engineering concepts and 3+ years applied experience
- Hands-on experience in developing, engineering, or architecting within a public cloud environment.
- Development experience in Python and engineering with Terraform or infrastructure-as-code.
- Perform security reviews of infrastructure-as-code and Kubernetes platforms, including RBAC configurations.
- Conduct risk-based assessments of secure technology controls for cloud services, platforms, and architectural components
- Assist in executing and enhancing a long-term information risk and control strategy to secure public cloud information assets
- Proficient verbal and written communication skills, including the ability to effectively participate in discussions and meetings with internal management, peer groups, regulators and senior stakeholders.
Preferred qualifications, capabilities, and skills
- Keen desire to understand and secure public cloud technology.
- Eagerness to collaborate in a team, and comfortable in both virtual and office environments.
- Ability to prioritize and work under stringent timelines.
- AWS, Azure or Google Cloud certifications would be an advantage.
- Understanding of DevOps or CI/CD concepts would be an advantage.