Job description & Responsibilities in detail:
- Configuration of security tools on the Cloud platform, including but not limited to tools such as AWS CloudWatch, CloudTrail, Config, GuardDuty, Security Hub, Automated Security Response (ASR) on AWS.
- Tuning of the alerts generated by the security tools and working with the Security Operations Center (SOC) team to ensure that the alerts are properly triaged.
- Creation of customized rules to detect for any non-compliance to the security baseline. These customized rules can be built on tools, such as AWS Config and ASR.
- Implement automatic remediation to fix non-compliance to the security baseline, at the same time ensuring the remediation work do not affect the system functionality.
- Provide security advisory and consultancy services to application teams who wish to onboard to the Cloud platform.
- Security review and testing of new Cloud services to be used on the Cloud platform, as well as to incorporate the requirements into the security baseline.
- Propose and implement security enhancements to the Cloud platform, by reviewing the existing configuration and implementing new tools, such as Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) tools.
- Write AWS Lambda functions using Python Boto3 for automation work.
- Develop integrated security operating models and documentations to ensure operational efficiency, scalability, and sustainability.
- Creation of security baselines in response to new Cloud services that are offered by the Cloud providers.
- Act as a domain expert and trusted partner in cyber security, work closely with stakeholders in other groups on cyber security engineering related matters
Requirements:
- Bachelor Degree in Information Technology, Computer Engineering or equivalent.
- Subject-matter expertise across all AWS (preferred) and/or Azure and/or Google Cloud Platform (GCP) services.
- Hands-on experience in AWS (preferred) and/or Azure and/or GCP including technical design, configuration and implementation.
- Hands-on experience in Infrastructure as Code (IaC) tools such as AWS CloudFormation, Terraform, etc. and familiar with IaC security best practices.
- Hands-on experience with Identity and Access Management (IAM) configuration and familiar with IAM best practices.
- Hands-on experience writing AWS Lambda functions using Python Boto3.
- Familiar with the AWS (preferred) and/or Azure and/or GCP range of services.
- Professional qualification in information security, such as CISSP / CISM will be advantageous.
- Preferably have the following certifications or equivalent: AWS Certified Solutions Architect and AWS Certified Security Specialty.
- Must be able to work independently or with a team, under minimum supervision.
