Description

Key Responsibilities:

•           Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions

•           Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments 

•           Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.

•           Explain complex security risks to non-technical stakeholders

•           Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.

•           Review proposed cloud solutions for security risk and define appropriate security and compensation controls. 

•           Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.

•           Monitor security events using SIEM technologies and work with VDOT’s SOC team to coordinate incident response activities.

•           Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment. 

•           Lead investigation and containment of cloud security incidents.

•           Review firewall and NSG rule requests and ensure compliance with security standards.

•           Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required. 

•           Must have the ability to work independently on assigned projects.  

Skill matrix:

Key Skills

Education

Bachelor’s degree