Job Description

10 years of Information Security or engineering experience 3 years of direct experience in at least one Public CloudWork closely with Product Security Engineering Operations and Corporate Security to define security strategy and execute on it Implementing automation to enable developers to easily consume security servicesImprove the accessibility of security through automation continuous integration pipelines and other means Designing a secure application release automation process to make security an integral part of the CI CD pipelinesEnforce standard methodologies processes and tools and ensure compliance to enterprise architecture global information security policies and engineering strategyValidate adherence to AWS and Azure governance standards for policy definitions role based access controls ARM Templates resource groups and Azure BlueprintsIdentify security tools and lead operationalization of solutions from POC to Production API Threat Protection Container Security Streamline POC processesImplement automation to investigation and response workflows for Automated Incident ResponseEncourage others to seek opportunities for different and innovative approaches to addressing problem facilitate the implementation and acceptance of changeProduce and streamline audit evidence.Stay current on threats vulnerabilities and controlsFamiliarity with SecOps processes detection monitoring alerting and threat intelligenceProficiency in scripting using Bash PythonExpert knowledge with integrating crucial security tasks into CI CD pipelinesStrong knowledge of software development methodologies and the software development lifecycleStrong knowledge of container security DevSecOps Tools and Security controlsWorking experience with configuration management Experience with Azure technologies in general such as Service Fabric Application Service Environment Azure Kubernetes Service Azure SQL Cosmos Azure APIM Azure AD Azure OMS Application Insights Global Traffic ManagerExperience with AWS technologies such as CodePipeline CodeBuild CodeDeploy CodeStar Guardrails Amazon ECS AWS Lambda

Virtusa