Analyze product security requirements and apply industry-recognized methodologies to translate them into effective security controls.
Design and support the implementation of secure cloud architectures.
Audit externally developed product security designs, document missing security controls, and lead efforts to analyze and implement security improvements.
Conduct threat modeling, attack surface analysis, and attack tree creation for products running on cloud platforms.
Research, review, compare, and propose technologies that meet client requirements.
Perform comprehensive security posture assessments through various methodologies.
Validate CI/CD pipelines and audit deployment configurations across various hosting environments.
Ensure that implemented solutions align with the product’s security architecture and requirements.
Document and present product security risks in both technical and business contexts.
Lead and support a small team of security engineers and consultants in assessing and researching cutting-edge technologies.
Requirements
MSc or BSc. in Electrical Engineering, Computer Science, Computer Engineering, or equivalent practical experience.
8 + years of experience in Information or IT Security
3 + years of experience in cloud application or cloud platform security related roles.
Proven experience in developing or auditing security solutions for cloud platforms (public, private or hybrid Cloud Service Providers).
Proficient in English and excellent communication skills.
Experience with designing, implementing and auditing cloud platform security architecture and engaged technologies.
Experience with GCP, AWS or Azure and their security features.
Experience on developing & comprehending source code, identifying security flaws in Web
and Cloud-relevant languages such as Java, Ruby, Rust, Go, Python, C#, Lua, and JavaScript.
Experience with application authentication, authorization, identity, and secrets management technologies.
Experience in identifying and mitigating security vulnerabilities on software running on cloud platforms.