Key Responsibilities

• Analyze technologies and establish highly effective processes and protocols to protect company networks and systems from unauthorized access.
• Design, develop, and maintain secure and resilient enterprise-grade cloud processes. 
• Assist in developing and testing standard cybersecurity design requirements to enhance the security posture of the organization.
• Support the creation and publication of documentation related to cybersecurity management and adherence to industry standards and best practices.
• Implement automation solutions to streamline routine tasks, enhance team productivity, and reduce manual workload.
• Conduct independent verification and validation (IV&V) testing of company networks and sensitive programs through internal resources and external consultants.
• Evaluate and document the cybersecurity posture of applications and infrastructure to identify potential risks and suggest mitigation strategies.
• Utilize and integrate security solutions such as Cloud Security Posture Management (CSPM), Cloud Access Security Brokers (CASB), and Cloud Workload Protection Platforms (CWPP).
• Stay updated on current cybersecurity threats and vulnerabilities, and implement measures to mitigate risks.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Assurance, Management Information Systems (MIS), or a related field, or equivalent business experience.
• 5+ years of technical, hands-on experience in cybersecurity with a strong focus on cloud infrastructure.
• Relevant certifications (e.g., CISSP, CISM) or willingness to pursue such certifications.
• Practical experience with OWASP, CVSS 3.0, STRIDE framework, CVE, and CWE.
• Experience with MITRE ATT&CK, Cyber Kill Chain, including knowledge of Tactics, Techniques, and Procedures (TTPs).
• Experience in performing security threat modeling and risk assessments.
• Strong understanding of cloud computing services, including AWS and Azure.
• Knowledge of STIX/TAXII, SIGMA, DISA STIGs, and other cybersecurity compliance standards.
• Proficiency in scripting languages such as Python and shell scripting to automate tasks and support cybersecurity initiatives.
• Solid understanding of encryption techniques, cryptography, and secrets (key) management practices.

Posted By