AWS Threat modelling

JD for Threat modelling+AWS

Seeking a Cloud Security Architect with specific knowledge in information security practices in Cloud computing. These positions will be specific to AWS and the secure on-boarding of AWS Cloud native services (IaaS, PaaS, and SaaS), and technologies deployed to AWS IaaS compute or containers. An effective candidate has experience with a broad set of AWS service and how to secure them, a broad set of technologies used to build custom applications, and how to build component threat models, control mapping, and control design. Many controls will be enabled with the Infrastructure as Code pipeline or at run-time with policy as code. The IaC pipeline is enabled by Terraform and therefore experience reading .tf files to ensure the efficacy of control is required.

Experience with information security in Cloud - 5+ years

Experience as an information security architect - 3+ years

Experience with AWS - 6+ years

Experience with threat modeling - 2+ years

Experience with Terraform - 3+ years

Experience with Policy as Code - 2+ years

Desired

Working knowledge of cross-Cloud concerns including Azure.

Working knowledge of Palo Alto's Prisma Cloud (Bridgecrew) or Checkov

Working knowledge of OPA or HashiCorp's Sentinel.