Cloud Security Expert (3-6 yrs)

Job Description :

- Security Architecture & Design : Develop and implement cloud security architectures for AWS and Azure environments, ensuring compliance with industry best practices and organizational policies.

- Security Management : Manage and monitor cloud security controls, including identity and access management (IAM), encryption, firewalls, and network security.

- DevOps & CI/CD Integration : Work closely with DevOps teams to integrate security best practices into CI/CD pipelines. Automate security checks within the CI/CD process to ensure that code meets security standards before deployment. Collaborate with engineering teams to ensure secure software development practices.

- Cloud Orchestration Security : Implement and manage security controls for cloud orchestration platforms such as Kubernetes, Docker Swarm, or AWS ECS. Ensure that orchestration tools and processes comply with security best practices and organizational policies. Monitor and secure containerized applications and microservices in cloud environments.

- Compliance & Governance : Ensure that all cloud environments adhere to regulatory requirements (e.g., Fedramp,HIPAA, GDPR) and organizational security policies.

- Incident Response : Lead the response to security incidents, conduct root cause analysis, and implement corrective actions.

- Risk Assessment : Perform security risk assessments and vulnerability testing across cloud environments. Develop mitigation strategies for identified risks.

- Automation & Scripting : Implement automated security controls, continuous monitoring, and compliance validation. Experience with scripting languages (e.g., Python, PowerShell) is a plus.

- Collaboration : Work closely with DevOps, Engineering, and Compliance teams to integrate security into the development and deployment pipelines.

- Training & Awareness : Provide training and awareness programs to internal teams on cloud security best practices and threat landscapes.