Description

You will lead the cloud security posture management (CSPM) program and drive continuous improvements to security configurations.

Responsibilities

• Lead the CSPM program to align cloud security configurations with NIST CSF, ISO 27001, and Cloud Security Alliance standards.
• Evolve detection policies on CSPM and draft technical standards for vulnerability remediation.
• Engineer the adoption of Infrastructure as Code (IaC) and Policy as Code (PaC) for continuous risk monitoring.
• Design frameworks to secure CI/CD pipelines and conduct risk assessments of cloud architecture.
• Collaborate with engineering teams to define baseline security configurations and manage cloud hygiene metrics (KCI, KPI, KRI).

Required Skills

• 7+ years of experience in cloud security and cloud-native infrastructure.
• Strong expertise in AWS Cloud security.
• Proficiency with Cloud Security Posture Management (CSPM) tools and frameworks (NIST CSF, ISO 27001, CSA).
• Hands-on experience with Infrastructure as Code (IaC) and Policy as Code (PaC).
• Working knowledge of OAuth and OpenID Connect authentication protocols.
• Experience securing CI/CD pipelines and implementing DevSecOps practices.
• Experience with vulnerability management and detection policy creation.
• Understanding of multi-cloud and containerized environments.
• Ability to conduct cloud architecture risk assessments and secure applications, OS, networks, and databases.

Preferred Skills

• Experience analyzing and evaluating security solutions for databases and networks.

Key Skills

Education

Any Graduate