We are looking for an experienced Senior Cloud Security Engineer to join the Cyber Security Operations team. This is a 12 months contract role to start with a potential to extend / convert based on the performance and business needs.
Roles and Responsibilities:
- The ideal candidate must have deep knowledge of security controls, tools, features, and operations for AWS / Azure. Candidate should be able to demonstrate relevant experience with implementing and enhancing detective capabilities in a fully managed AWS / Azure environment.
- The candidate should be intellectually curious about technology and the evolving threat landscape.
This role will help to build a detection engineering process and culture for a SIEM platform covering on-prem and multi-cloud environments while serving as a technical subject matter expert for the AWS / Azure environment. - It will partner with teams across Global Information Security to design, develop, tune, and maintain detection content to protect the and support the information security policies and/or procedures.
Skills and Experience
- Bachelor’s or Master’s Degree in Computer Science, Information Systems, Cyber Security, or related field.
- Eight (8) or more years relevant Cyber Security experience with at least five (5) years in Cloud SOC and/or Purple Team roles.
- Highly organized and motivated self-starter who can deliver results with minimal direction.
- Experience writing and tuning detections.
- Experience with SIEM tools.
- Experience designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS.
- Experience reviewing applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
- Experience with a range of AWS . Azure native services and tools (i.e. Guard Duty, Security Hub)
- Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND.
- Understanding of Risk Management principles.
- Experience in building, configuring, operating and/or securing cloud infrastructure and applications in AWS / Azure with either native cloud service provider capabilities or 3rd party vendor tools.
- Ability to independently assess risks and identify vulnerabilities in infrastructure with an eagerness to suggest new processes, policies, and overall improvements to internal security controls.
- Experience partnering with incident response teams, threat intelligence researchers, Red/Purple teams, and/or HUNT researchers.
- Familiarity with common Information Security and data protection frameworks and standards (i.e. CIS, NIST, HIPAA, GDPR, PCI DSSS, ISO 270001).
- Ability to navigate and collaborate effectively within a geographically complex and dispersed global corporation.
- Excellent verbal and written communication skills with ability to distill key data points and effectively present information.
- Preferable Certifications
CCSP / CCSK
CISSP / CISM / Security +
Argyll Scott Consulting Pte Ltd
