Requirements
· Should have 5-7 years of experience on Cloud security in any of two CSPs – AWS, Azure, GCP
· Worked on Threat modelling of Cloud based SaaS based applications, AWS services.
· Should be having strong understanding of cloud related technologies.
· Worked on IAC scanning, Terraform etc.
· Proficiency with at least one scripting language (e.g., Perl, Python and PowerShell).
· Strong understanding on Cloud architecture, data flows, encryption & security principles
· Implement cloud security strategy, standards, procedures, best practices, and DevSecOps.
· Implement processes and technical controls supporting cloud security standards including integration of cloud services and workloads into corporate cybersecurity services.
· Implement CSPM tools such as wiz.io across multiple cloud platforms.
· Define cloud security policies, standards, and best practices in a multi-cloud environment.
· Ensure all SaaS applications are configured with best practices and perform routine auditing of settings and newly released features.
· Document SaaS application configuration settings, integrations, service accounts
· Collaborate with operations and engineering teams to implement and tune cloud-native security monitoring, tooling and reporting
· Build compliance requirements and SaaS Application security baselines, ensuring SaaS applications are implemented to align with requirements.
· Evaluate new applications to ensure implementation can meet security baselines.
· Strong experience in vulnerability management & risk assessment
· Security+, CISSP, CCSP or cloud service provider’s related certification preferred.
Any graduate