Description

You will own the security posture of cloud infrastructure by integrating IaC scanning into CI/CD pipelines and tuning cloud-native firewalls.

This role is on-site.

Responsibilities

• Integrate IaC security tools (Checkov, TFSec, Snyk) into CI/CD pipelines and analyze remediation findings for Terraform, CloudFormation, and ARM templates.
• Design, implement, and tune native firewall rules across AWS, Azure, and GCP to reduce attack surfaces.
• Develop custom security policies for IaC scanning tools aligned with organizational standards.
• Align security controls with NIST, CIS, and ISO 27001 frameworks and support audit processes.
• Automate security tasks using PowerShell, Bash, and Python.

Required Skills

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or similar IaC tools.
• Deep understanding of cloud-native firewall services in AWS, Azure, and GCP.
• Proficiency in security scanning tools such as Checkov, Prisma Cloud, Aqua, or Snyk.
• Scripting proficiency in PowerShell, Bash, and Python.
• Strong knowledge of network security principles and risk management.

Preferred Skills

• Certifications in AWS/Azure/GCP Security Specialty, CISSP, CCSP, or Terraform Associate.

Key Skills

Education

Any Graduate