Senior Security Engineer, Cloud Security & Vulnerability Management

Responsibilities

• Cloud & Container Security - Develop, deploy and maintain advanced cloud security controls to enable the prevention, detection and response to security threats in cloud and container environments. Configure and deploy cloud-native security controls (eg. AWS GuardDuty, Google SCC, Azure Security Centre, CSPM/KSPM, CNAPP solutions etc.)
• Cloud Investigation and incident response - Proficient in end-to-end Incident Response. Able to take the lead and provide guidance during investigations and incidents to pivot the investigation, drive containment, mitigation and other security outcomes. Proficient in performing investigations using open source and proprietary tools, including but not limited to - EPP/EDR/XDR software, Digital Forensics tools/software, SIEM platforms
• Configuration Management - Design, develop, and maintain Ansible playbooks for automating server configuration hardening in alignment with various compliance frameworks (e.g., CIS, PCI-DSS, NIST).
• Cloud Vulnerability Management - Configure, execute and maintain regular vulnerability scans on cloud environments using industry standard tools. Analyze scan results to assess the severity of the vulnerabilities, leveraging industry best practices and frameworks (eg. CVSS, etc); and prioritise remediation based on risk and business impact.
• Security Projects - Lead projects and initiatives that may involve - Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements (AWS, Azure, GCP), Runtime Vulnerability Management, Threat Hunting, Network/Endpoint/Cloud security reviews, etc.
• Leadership - Be comfortable with cross-functional leadership and stakeholder management. Be willing to lead and nurture a small team of junior security specialists.