Description

Key Responsibilities

• Architect and maintain secure, scalable cloud and cloud-native environments.
• Embed security controls into CI/CD pipelines and infrastructure-provisioning workflows.
• Develop infrastructure as code using Terraform and configuration automation using Ansible.
• Design and implement least-privilege IAM, encryption, secrets management, logging, and cloud-governance controls.
• Support AWS security capabilities across networking, compute, storage, monitoring, threat detection, and configuration management.
• Implement security scanning, policy enforcement, SAST, DAST, and container-security controls.
• Manage cloud-native deployments using Docker, Kubernetes, Jenkins, and Azure DevOps.
• Design high-availability, blue-green deployment, rollback, and disaster-recovery strategies.
• Build monitoring, alerting, and observability solutions using CloudWatch, Datadog, ELK, Splunk, or comparable platforms.
• Conduct vulnerability assessments, patch management, server hardening, and security-remediation activities.
• Participate in threat modeling, security architecture reviews, attack-surface analysis, and risk assessments.
• Support incident triage, log correlation, root-cause analysis, escalation, and response playbooks.
• Implement and review controls aligned with PCI DSS, SOC 2, ISO 27001, and CIS benchmarks.
• Support Site Reliability Engineering practices covering availability, scalability, performance, and operational excellence.
• Maintain technical documentation, standard operating procedures, and security playbooks.

Required Skills

• Strong experience with AWS and working knowledge of Azure or GCP.
• Hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins, and Azure DevOps.
• Strong experience with AWS IAM, VPC, EC2, EKS, ECS, S3, CloudWatch, AWS Config, KMS, WAF, and load-balancing services.
• Experience with cloud security, IAM governance, network security, encryption, and secrets management.
• Experience implementing infrastructure as code and automated CI/CD pipelines.
• Experience with SIEM, vulnerability management, security scanning, and incident response.
• Scripting skills using Python, Bash, or PowerShell.
• Knowledge of SAST, DAST, EDR, NDR, PAM, Active Directory, and firewall controls.
• Experience with monitoring and observability tools.
• Understanding of SRE, high availability, resilient systems, and production reliability.
• Familiarity with security and compliance frameworks such as PCI DSS, SOC 2, ISO 27001, and CIS.

Preferred Skills

• Experience with GuardDuty, Security Hub, CloudTrail, Wazuh, or similar security platforms.
• Experience with Snowflake and SaaS platform operations.
• Knowledge of Kafka, RabbitMQ, Redis, PostgreSQL, MySQL, or Oracle.
• Exposure to MITRE ATT&CK, MITRE ATLAS, and OWASP guidance for AI or LLM applications.
• Experience securing AI platforms or automating adversarial security testing.
• Familiarity with GitHub Copilot or AI-enabled development tooling.

Education

• Degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
• Advanced cybersecurity education or industry certifications are considered assets

Key Skills

Education

Bachelor's degree