Senior Security Engineer

InfoVision Inc.; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

InfoVision Inc. is seeking a Senior Cloud Security Engineer to design, configure and administer cloud information security systems. You will champion secure cloud practices, collaborate with cross-functional teams and drive enhancements across cloud platforms to protect data and services.

You will identify threats, develop features to meet security needs, and oversee deployment, monitoring and ongoing improvement of cloud-based security controls, working with AWS, Azure and related technologies.

Qualifications

• Bachelor's degree in CS/Networking/IT
• 5+ years of work experience in information security or infrastructure with cloud platforms
• Experience with AWS, large-scale cloud platforms and related tools (AWS Security Hub, Prisma, Jenkins)

Responsibilities

• Design, implement and operate cloud security controls across cloud platforms
• Collaborate with Information Security, Infrastructure and DevOps teams to build secure cloud solutions
• Identify threats, remediate gaps and drive security automation
• Plan, architect and deploy secure cloud system requirements and monitor for malicious activity

Skills

Networking

Vulnerability management

Encryption & key management

WAF

NAC

PAM

Change management

Incident management

Server & desktop management

SDLC / Agile/Scrum

REST / API security

Azure security

Education

Bachelor’s degree in computer science, networking or information technology

Tools

AWS Security Hub

Prisma

Jenkins

Azure AD

Azure Information Protection

Job description

The Senior Cloud Security Engineer is responsible for coding, configuring and administering cloud information security systems. This role is expected to champion processes and technology as a subject matter contributor and researcher in various cloud infrastructure and system technical areas. The Senior Cloud Security Engineer works closely with teams in other Information Security disciplines, infrastructure, and operations areas to help provide superior protection. This role serves as a cloud security practitioner that builds and operates information security controls, specific to cloud processing platforms. Senior Cloud Security Engineers identify threats to cloud systems, develop new features to meet security needs and build, maintain, upgrade and continuously improve cloud-based systems. The Senior Cloud Security Engineer does everything from planning and architecting secure cloud system requirements to constructing, validating and deploying the system to monitoring and detecting malicious activity once the system is deployed. Additionally, this role identifies and recommends/remediates security gaps on the platform and infrastructure.

Job Description

Summary:

The Senior Cloud Security Engineer is responsible for coding, configuring and administering cloud information security systems. This role is expected to champion processes and technology as a subject matter contributor and researcher in various cloud infrastructure and system technical areas. The Senior Cloud Security Engineer works closely with teams in other Information Security disciplines, infrastructure, and operations areas to help provide superior protection. This role serves as a cloud security practitioner that builds and operates information security controls, specific to cloud processing platforms. Senior Cloud Security Engineers identify threats to cloud systems, develop new features to meet security needs and build, maintain, upgrade and continuously improve cloud-based systems. The Senior Cloud Security Engineer does everything from planning and architecting secure cloud system requirements to constructing, validating and deploying the system to monitoring and detecting malicious activity once the system is deployed. Additionally, this role identifies and recommend/remediates security gaps on the platform and infrastructure.

Minimum Qualifications:

• Bachelor’s degree in computer science, networking or information technology
• Years of Work Experience Required : 5+ years
• Type / focus of work experience required: Experience in Information Security or Infrastructure, with large scale platforms (cloud technologies), complex inter-dependent technologies, data centers, AWS, internal software systems and tools e.g. AWS Security Hub, Prisma, Jenkins, etc.

Knowledge, Skills and Abilities:

• Networking, LDAP directories, vulnerability/patch management, encryption and key management, web application firewall (WAF), network access control (NAC) and privileged access management (PAM).
• Change management, Incident management, server and desktop management and access management.
• Cloud architecture and computing and software application general computing controls.
• Business continuity/disaster recovery.
• Systems development lifecycle and project management methodologies, specifically Agile/Scrum.
• Working knowledge of web services, API, REST, RPC and how to properly secure them in conjunction with experience and practical application of cloud security controls based on industry frameworks e.g. Cloud Security Alliance.
• Knowledge of overall Microsoft Office 365 security including knowledge of azure active directory, azure information protection, information rights management, single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security