Mea Platform - Cloud Security Lead - AWS/Azure (8-12 yrs)

Job Description :

We aim to make business processing effortless and this aim should be delivered in each and every direct or in-direct client interaction

Role description :

Job Title : Security Engineer

Reports To : CTO/CISO

Job Overview :

At mea platform, we are seeking a highly skilled and experienced Security Engineer specializing in AWS and will be responsible to ensure proper security policies are configured to meet compliance regulations, identify new security policies required for protecting client application instances, and configure AWS security services to fulfill the security needs of our clients.

Key responsibilities :

- Design and implement cloud security architectures and frameworks across various cloud providers (AWS, Azure, GCP).

- Monitor and analyze security alerts from cloud services and implement appropriate measures to mitigate risks.

- Implement and manage Identity and Access Management (IAM) policies and roles to enforce the principle of least privilege.

- Conduct regular security assessments and audits, including vulnerability scanning, penetration testing, and risk assessments.

- Ensure compliance with relevant security standards and regulations (e.g., GDPR, HIPAA, SOC 2, ISO27001m, NYDFS etc).

- Regularly review and update security policies to adapt to changing regulatory requirements and industry best practices.

- Stay updated with the latest AWS security features and services, and incorporate them into security policies

Education and Skills :

- B.Sc. in Computer Science, Information Security, or related field. 8+ years of experience in information security, with a focus on cloud security, specifically AWS.

- Experience with compliance standards such as GDPR, HIPAA, SOC 2, ISO 27001.

- Relevant certifications such as AWS Certified Security - Specialty, CISSP, CISM, or equivalent are a plus.

- Strong understanding of network security, encryption, and access control.

- Experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and incident response tools.

- Detail-oriented with a strong focus on accuracy and quality, ability to work independently and as part of a team.