Cloud security Professional

P1,C3,TSTS
Bachelor's Degree in Computer Science, Information Systems, Business Administration or other related field
- Certification may be required for specific functions
- 6-9 years of information security experience
- Experience with gathering functional requirements, deployment of information security tools, and data analysis
- In-depth experience with desktop software and office automation tools
- Experience with information security risk management and process improvement

- Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE.
- Experience with application security controls (Web, API, Mobile, AI).
- Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS.
- Experience with Application Security design and DevSecOps
- Full stack knowledge of application architectures including: Single Page Applications, REST APIs, SOAP APIs, Mobile Applications.
- Experience with Java, Javascript and mobile application development.
- Knowledge or familiarity with database architectures including Oracle, SQL, DB2 and NoSQL Databases
- Experience with Cloud security, architecture, design, implementation, and operations
- Exposure to IAM Controls (OAuth 2.0, OIDC, JWT)
- Strong familiarity with Cryptography Controls (Data at rest, in motion).
- CISSP, CISM, CSSLP, CISA, CRISC, OSCP
skills
Application Security Controls
IAM Controls
Cryptography
Cyber Security
CISSP, CISM, CSSLP, CISA, CRISC, OSCP