Description

Lead the cloud security posture management program and drive continuous improvement of cloud security configurations aligned with global standards. Own the detection policy evolution, vulnerability management dashboards, and the adoption of Infrastructure as Code (IaC) and Policy as Code (PaC). Design security frameworks for CI/CD pipelines and conduct risk assessments of cloud architecture in multi-cloud, containerized environments.

Responsibilities

• Evolving CSPM detection policies and drafting technical remediation standards for vulnerabilities.
• Engineering and uplifting the adoption of IaC and PaC for continuous risk configuration monitoring.
• Designing frameworks to secure CI/CD pipelines and defining baseline security configurations with engineering teams.
• Conducting cloud architecture risk assessments and recommending controls to mitigate identified risks.
• Monitoring and managing cloud hygiene metrics (KCI, KPI, KRI) and providing subject matter expertise on security solutions.

Required Skills

• Strong hands-on experience in AWS Cloud security and cloud-native infrastructure.
• Proficiency in Cloud Security Posture Management (CSPM) tools and standards (NIST CSF, ISO 27001, CSA).
• Experience with Infrastructure as Code (IaC) and Policy as Code (PaC).
• Understanding of OAuth and OpenID Connect authentication protocols.
• Experience with vulnerability management, detection policy creation, and securing CI/CD pipelines.
• Familiarity with multi-cloud and high-density containerized environments.
• Ability to conduct cloud architecture risk assessments and collaborate on remediation practices.
• Knowledge of security for applications, OS, networks, and databases.

Preferred Skills

• Experience preparing and delivering security awareness training to engineering teams.
• Skilled in monitoring cloud performance and hygiene metrics (KCI, KPI, KRI).

Key Skills

Education

Any Graduate