Roles and Responsibilities

• Develop and maintain security architecture vision, standards, and frameworks that support business and IT strategies.
• Write security policies and standards to improve security posture across the organization.
• Design and implement security strategies for endpoints, containers, authentication, threat detection, and more.
• Provide expertise in securing infrastructure (cloud and on-prem), applications, and databases.
• Conduct security risk assessments, vulnerability analyses, and recommend mitigation strategies.
• Collaborate with business and IT teams to ensure security requirements are aligned with overall objectives.
• Work with development teams to continuously improve the Secure Software Development Lifecycle (S-SDLC).
• Lead proof-of-concept initiatives for new security technologies and strategies.
• Ensure optimal security in cloud environments (Azure, AWS, GCP) and manage cloud security configurations.
• Perform security audits and coordinate compliance with security frameworks such as CIS, PCI, GDPR, NIST, and ISO27000.
• Address security gaps in existing architecture, ensuring security enhancements are implemented.

Required Skills/Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field (preferred).
• Industry certifications such as CISSP, CISM, CISA, GSEC, or similar.
• Experience with container orchestration (e.g., Kubernetes) and microservices architecture.
• Strong knowledge of Zero Trust Network Architecture (ZTNA).
• Familiarity with PCI, GDPR, NIST, and ISO27000 series security standards.
• Expertise in network security, firewall technologies, and vulnerability management.
• In-depth knowledge of application security, OWASP Top Ten, and web application security.
• Experience with cloud security management in Azure, AWS, or GCP.
• Hands-on experience with intrusion detection systems (IDS), intrusion prevention systems (IPS), and SIEM tools.
• Ability to lead incident response and manage security events.

Posted By