Security Engagement Lead

Location - Town or City

About the role

This hands-on entry level leadership role is responsible for leading a team of cloud security engineers responsible for securing cloud-based digital platforms and plays an integral role in engaging with business units in order to ensure the organization's digital platforms are protected. This role involves analyzing existing cloud security measures/controls and creating new and enhanced security methods. This role is part of a larger team dedicated to cloud-based management and security. The role is also responsible for the development and execution of large-scale cyber security initiatives and requires a professional with problem-solving abilities who can work in a fast-paced environment and has a clear passion for cloud security and cloud technologies. 

What you'll do

• Mentor a team of cloud security engineers. 

• Provide assurance through collaboration with other stakeholders that all cloud and digital platforms meet the organization's security requirements. 

• Provide security recommendations on cloud-based data security, platforms and application development. 

• Recommend innovative technologies or other methods that will enhance the security of cloud-based environments. 

• Serve as the subject matter expert (SME) on cloud security. 

• Develop standards, policies and procedures as well as best practices documentation. 

• Translate security and technical requirements into business requirements and communicate security risks to different audiences ranging from business leaders to engineers. 

• Influence multi-disciplinary teams in implementing and operating cyber security controls. 

• Work closely with application developers to deliver creative solutions to complex technology challenges and business requirements. 

• Automate security controls, data and processes to provide better metrics and operational support. 

• Utilize cloud-based APIs when appropriate to write network/system level tools for securing cloud environments. 

• Stay current on emerging security threats, vulnerabilities and controls. 

• Identify and implement new security technologies and best practices. 

• Create technical and managerial level reports and conduct risk assessments for cloud-based applications and infrastructure. 

• Identify processes/procedures for how to handle cloud security events, including forensic isolation and mitigation with Digital Forensics and Incident Response teams. 

• Identify new security threats by conducting continual monitoring, penetration testing, vulnerability assessments and log analysis. 

What you bring

• A Qualification in computer science, cybersecurity, or any related field. 

• Recognized industry certifications in cloud security - CCSP. 

• At least 5 years of experience in cyber security. 

• At least 3 years of experience and hands-on expertise in cloud security. 

• Extensive knowledge of public cloud offerings such as AWS (Essential), Azure and GCP. 

• Practical knowledge of services related to cloud computing, network, storage, content delivery, administration and security, deployment and management, automation technologies. 

• Robust microservices programming (AWS Lambda, Docker, etc.). 

• Good understanding and exposure to cloud standards, architecture and models. 

• Experience with PKI, SSL, SSH, etc. 

• Hands-on knowledge of automation and DevSecOps skills. 

• Good understanding of software development principles, including design patterns, code structure, programming languages, continuous integration, continuous deployment, and deployment orchestration. 

• Experience with open-source software security. 

• Experience with network protocols and deep packet inspection. 

• Knowledge of microservices, Kubernetes, Docker, etc. 

• Extensive experience with AWS WAF and Azure Front Door. (Essential)