Security Specialist

Dikshatek; United States; Remote; USD 90,000 - 130,000; Part time

Job summary

Dikshatek is seeking a Security Specialist to oversee secure migration of on-premises workloads to AWS, ensuring PCI DSS compliance and robust cloud security controls.

The role emphasizes risk assessment, security policy development, and collaboration with the cloud architecture team to implement secure solutions. This is a contract-based position with remote work options.

Qualifications

• Minimum 4+ years implementing and operationalizing cloud security solutions.
• Experience migrating on-premises workloads to AWS with strong PCI DSS focus.
• Proven ability to assess risks and implement mitigation strategies.

Responsibilities

• Lead and implement cloud security solutions on AWS and related technologies.
• Perform on-premises assessments and risk analyses for AWS migration.
• Develop security policies to ensure PCI DSS compliance in cloud environments.
• Collaborate with cloud architecture to design secure solutions.
• Monitor, audit, and respond to security incidents in AWS.
• Create runbooks, test plans, and knowledge transfer materials.

Skills

Solutions Architect - Associate/Pro

AWS Security Specialty

PCI DSS knowledge

Tools

Firewalls

IDS/IPS

SIEM

Encryption

Job description

Position: Security Specialist

Hiring: Contract based

Location: Hanoi, Vietnam

Working model: Remote - prefer base in Hanoi

Man-day estimation: 38

Payment requirement: when all Deliverables are delivered and met expectations

Tentative start month: July 2024

Scope

Our client is a leading financial institution dedicated to providing innovative banking solutions. As we transition our on-premises infrastructure to the cloud, we seek a skilled Security Specialist to ensure our migration to AWS is secure and compliant with industry standards such as PCI DSS. The Security Specialist will play a crucial role in our cloud migration project, focusing on securing workloads and ensuring compliance with security standards. The ideal candidate will have extensive experience in AWS, a deep understanding of security practices, and knowledge of regulatory requirements, especially PCI DSS.

Key Responsibilities

• Lead, implement and maintain including Cloud Security Solutions from AWS, next generation firewalls, application firewall/DDoS, container security and the Web Application Firewall (WAF) the security strategy for migrating on-premises workloads to AWS.
• On-Premises Assessment
• Conduct risk assessments and vulnerability analyses to identify potential security threats.
• Document all aspects of database management, including design, configuration, maintenance, and troubleshooting.
• Strategy Development
• Work with other Delivery team members to provide security input for Migration Strategy
• Collaborate with stakeholders to align migration strategy with business objectives and technical requirements.
• Migration
• Configure, implement, and support security software/systems that will help ensure compliance in AWS cloud environments.
• Develop and enforce security policies and procedures to ensure compliance with PCI DSS and other relevant standards.
• Collaborate with the cloud architecture team to design and implement secure cloud solutions.
• Monitor and audit AWS environments to ensure continuous security compliance.
• Respond to security incidents and guide mitigation strategies.
• Stay updated with the latest security trends, threats, and technologies.
• Testing and Quality Assurance
• Perform sample runs and test data ingestion, processing
• Create and execute test cases to validate data accuracy and performance
• Performance Optimization
• Monitor system performance and identify bottlenecks
• Optimize Security configurations where needed
• Transition to Client
• Handover all necessary documentation and knowledge to the customer team
• Assist with the transition process and provide ongoing support if required
• Provide training and support to internal teams on cloud security best practices.

Required Skills and Qualifications

• Technical Skills: Solutions Architect - Associate or Professional, AWS Security Speciality
• Minimum of 4+ years experience in implementation and operationalizing cloud security solutions/infrastructure
• Proven experience in migrating on-premises workloads to AWS.
• In-depth knowledge of AWS services and security features.
• Strong understanding of PCI DSS and experience ensuring compliance in cloud environments.
• Proficiency in conducting security risk assessments and implementing mitigation strategies.
• Experience with security tools and technologies such as firewalls, IDS/IPS, SIEM, and encryption.
• Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or PCI Professional (PCIP) are highly desirable.
• Preferred Skills: Excellent problem-solving skills and the ability to work under pressure.
• Knowledge of DevSecOps practices and tools.
• Strong communication and interpersonal skills.
• Ability to work collaboratively in a team environment.

Project Deliverables

• Migration: Successfully migrates the on-premises database to AWS.
• Current State Assessment Report: A detailed comprehensive security strategy and conduct risk assessments for AWS migration.
• Migration Strategy Document: A strategic roadmap for migrating on-premise applications to AWS Cloud, including timelines, resource requirements, and cost estimates.
• Migration Plan: Detailed migration plans for each application, including AWS service selection, architecture design, and implementation steps.
• Incident response plan for the AWS environment.
• Risk Assessment and Mitigation Plan: Identification of potential challenges and risks, along with mitigation strategies.
• Monitoring and audit reports to ensure continuous compliance and threat mitigation.Migration Runbooks: Comprehensive runbooks for migration processes, including Inventory list, pre-migration, migration, and post-migration steps.
• Environment setup: Creation and configuration of the AWS environment, including database cluster, backup solution
• Training and Knowledge Transfer Materials: Documentation to support training and knowledge transfer to internal teams and client personnel.
• All document compliance with PCI DSS and other relevant security standards.