Principal Security Architect, GISCS Security-Cloud
Job Description
The GISCS Cyber Security Architecture and Engineering function is responsible for the development of technical cloud security specifications, and the hands-on implementation of cloud security solutions (monitoring, governance, detective and preventative).
This individual will leverage a mix of proprietary cloud security tools, as well as be responsible for hands on development of scripts and cloud security solutions (, AWS Control Tower, identity-related solutions, AWS SCPs, etc.).
This role will work very closely with GISCS's Global Application Security team and must be skilled and experienced in Cloud DevSecOPs.
This role is focused on custom cloud workloads across AWS and Azure vs. SaaS solutions like MS O365.
ESSENTIAL FUNCTIONS
- Engage with cloud DevOPs teams to ensure new and existing cloud solutions, workloads, and environments are secure and meet published minimum security requirements.
- Research, test and implement security tools and custom solutions to scan, monitor and protect cloud environments. Requires significant coding and scripting skills, and usage of cloud service provider APIs.
- Develop hardening standards for cloud environments using a combination of industry best practices and experience.
- Conduct hands-on red teaming of cloud workloads and environments across AWS and Azure, assisting DevOPs teams to reproduce, triaging, and addressing cloud-related vulnerabilities and threats.
- Assist with the definition, and execution of a global cloud security strategy and roadmap, including people, process, and technology.
- Prioritize cloud vulnerability remediation items detected by tools or manual inspection and provide remediation recommendations.
Projects
- New Anti malware, anti phishing solutions : vendor selection, design, implementation
- Launching global cloud security program : over 160 cloud environments across brands, bring into one model, standardize
- On prem to cloud migrations
Skillset / Experience :
Bachelor's degree Engineering, Science, or Cyber / Information Security ideal
- 2 of the following : AWS Architect CertificationAWS Security ConfigurationAny Azure certificationsAny GCP certifications
- 5+ Cyber Security with cloud focus, 5+ programming
- Extensive knowledge of cloud environments, including Azure, AWS, and Google (GCP).
- Current and hands-on experience with Python coding / scripting
- Current and hands-on experience analysing, assessing, and responding to various internet threats
- Expert hands-on experience with APIs
- Must have hands-on experience with a cloud-native environment, preferably AWS
- Must have hands-on experience security cloud-native services, including but not limited to AKS, EKS, RDS, AWS Secrets Manager, etc.
- Experience in Cyber Security Architecture and Engineering and technical design specifically around Cloud Environments.
- Less than 25% with shipboard travel likely
Top Skills
- Good Cybersecurity Background with cloud : We use google cloud, Azure, and AWS
- Python nice to have for automation, terraform good
- Certs required
Related Jobs
Principal Security Architect, GISCS Security-Cloud
Security Technician
Safety and Security Officer
Security Officer,