Job Description:
- As a Cloud application security engineer you will be responsible for driving divisions application security transformation into the cloud platforms. .
- You will work with divisions to develop secure applications and software running on the cloud.
- You will help with secure design decisions, driving DevSecOps framework and governance and help guide other security engineers in this area.
- You will interface and lead in-depth technical security architecture discussion with Developers, Enterprise Security Architects, solution architects and potential external customers.
- The role is heavily security-focused and ingrained in the CI/CD pipeline automation to always deliver security principles and validation for Cloud solutions.
- With an emphasis on securing systems, applications, third-party connections, service providers and ancillary systems, business-to-business initiatives, third-party relationships, outsourced solutions, and vendors tasked with analyzing current security protocols to identify weaknesses or vulnerabilities that could be exploited by hackers.
In this role you will:
- Lead developers and testers in security activities during product lifecycle such as secure design reviews/threat modeling, security code reviews, security test planning, and security code hardening, to help identify potential vulnerabilities
- Supports driving security into continuous integration and continuous deployment (CI/CD) pipelines as part of integrated team member working with software developers, system engineers, cybersecurity engineers and systems administrators
- You will work collaboratively with peers and stakeholders across the enterprise on implementations and management including IT infrastructure, application development, security operations, security audit and end users
- You will be responsible for analyzing the security of applications and services, discovering, and addressing security issues, help building security automation, and quickly reacting to new threat scenarios
- Participate regularly in project and change management meetings
- Deliver projects on time, within budget and in accordance with service level agreements (SLAs)
Required (Basic) Qualifications:
- Bachelor’s in computer science, Cybersecurity, or comparable degree from an accredited institution.
- 5+ years hands on experience in cloud security application in Azure is required.
- 4+ years of experience in leading and deploying DevSecOps in Cloud applications
- Hands on experience in application and product security tooling and technology like SAST, DAST, SCA, API, container security, and cloud security posture management
Position Criteria:
- Ability to lead and manage diverse areas and large, complex projects.
- Ability to influence and work with various technical leads in different organizations.
- Excellent interpersonal and communication skills including the ability to explain technical concepts and present to business unit leaders and customers.
- Ability to foster collaboration across global development teams.
- Strong problem solving and reasoning ability, exhibiting technical innovation and creative solutions.