Infrastructure and cloud security engineer

ICE Services; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Competitive local benefits

Flexible working time/place

Mental and physical health initiatives

Corporate pension scheme

Training and development opportunities

Team socials and company events

Enhanced holiday allowance

Job summary

ICE Services ищет специалиста по облачной безопасности, чтобы разработать стратегию интеграции безопасности в AWS/Azure и выстроить безопасные облачные среды. Требуется опыт в моделировании угроз, автоматизации Terraform и настройке SIEM.

Кандидат будет сотрудничать с командами разработки и эксплуатации, обеспечивая соответствие стандартам NIST/CIS/ISO и контроль доступа. Гибридный формат работы,Competitive льготы и обучение.

Qualifications

• Опыт проектирования и документации безопасных решений в AWS и Azure.
• Навыки настройки и интеграции облачных технологий вместе с командами.
• Опыт внедрения third-party security technologies в облаке (firewalls, IDS/IPS).
• Понимание стандартов безопасности в облаке (NIST, CIS, ISO).
• Способность проводить анализ угроз и управлять рисками.

Responsibilities

• Разработка стратегии интеграции безопасности во всех проектах.
• Проведение анализа пробелов и управление рисками в облачных средах.
• Конфигурация и аудит безопасных конфигураций облачных окружений.
• Работа с Terraform для стандартных сборок и автоматизации.
• Разработка планов реагирования на инциденты и мониторинг событий безопасности.

Skills

Cloud security design

Azure/AWS security

Threat modeling

Terraform automation

Threat intelligence

Incident response planning

Communication skills

SIEM tooling

Tools

Terraform

Azure

AWS

IDS/IPS

Logging/Monitoring

Job description

Описание:

ICE Services is a music technology company built by rightsholders, for rightsholders. We simplify the complexities of the music royalty chain through an innovative suite of licensing, processing, and copyright services, enabling our customers to accurately and efficiently compensate songwriters and composers for the use of their works.

Задачи:

Engaging with key stakeholders to understand the current state of cloud security, develop the strategy of integration with all teams ensuring security is considered with all projects. Perform gap analysis and identify risks across all cloud environments, drive improvements, document remediation steps, and aid in the reduction of risk Design and build secure cloud environments. Working alongside the engineering function this role will assist the team in building an environment that meets the needs to host the applications in a secure manner. Assess technologies for use across all systems, identify new tools to evaluate for use, build requirement documentation, criteria for success and preform the proof of concept assessment. Configuring the corporate cloud functions and the security of AzureAD using policies and tools, this will include all corporate functions such as email, application connections, and stand alone servers. Performing audit and benchmarking across the cloud environments to ensure optimal level of security controls are implemented (such as vulnerability management) and to help drive future initiatives. Prepare and enforce standards and guidelines for cloud security, including standard builds, configurations, and automation processes, in particular the use of Terraform. Drive particular focus on access controls across the environments and data within the cloud infrastructure. Monitor solutions for critical security events and build investigation and incident response plans, including aiding the configuration and use of logging and SIEM tools. Offer consultancy as an SME to all business units in relation to technical projects.

Требования:

Experience in design, documentation, and configuration of secure solutions for AWS and Azure cloud environments. Experience in designing configuring tools and technology to work within or alongside cloud environments. Experience in designing and configuring third party security technologies within a cloud environment (ie, firewalls, IDS/IPS). Experience in securing cloud container environments. Working knowledge of cloud security standards including NIST, CIS, and ISO. Performed risk analysis and documented all risks and mitigating controls within cloud environments. Understanding of threat models and their application to aid in securing cloud environments. Act as a role model, engage with the promotion of a culture of good conduct and contribution to maintaining such a culture. Proactivity, transparency and clear accountability for the determination and management of security and risks. Fast learner and critical thinker with excellent skills in problem solving and presentation. Teamwork with peers and management. Exceptional communication skills, both written and oral.

Условия:

Competitive local benefits based on your location We promote flexible working regarding time and/or place Both mental and physical health initiatives Corporate pension scheme Comprehensive training and development opportunities Industry insider events, team socials and company events Enhanced holiday allowance