Lead and manage the response to complex and sophisticated security incidents.
- Develop and refine incident response strategies and playbooks.
Threat Intelligence:
- Integrate threat intelligence into security operations to enhance detection and response capabilities.
- Research and analyze advanced cyber threats and TTPs (Tactics, Techniques, and Procedures).
Advanced Security Analysis:
- Conduct in-depth analysis of advanced persistent threats (APTs) and other sophisticated attacks.
- Develop custom signatures and detection mechanisms for unique threats.
Forensic Expertise:
- Provide expert-level digital forensics and incident investigation support.
- Collaborate with law enforcement or external agencies when necessary.
Security Architecture and Design:
- Contribute to the design and implementation of secure network architectures.
- Assess and recommend improvements to security infrastructure.
Advanced Tool Management:
- Manage and optimize advanced security tools, such as threat intelligence platforms, sandboxing solutions, and advanced endpoint protection systems.
Policy and Compliance:
- Contribute to the development and enforcement of security policies and standards.
- Ensure compliance with industry regulations and standards.
Continuous Improvement:
- Drive continuous improvement initiatives within the SOC.
- Evaluate and implement current technologies and methodologies to enhance security capabilities.
Qualification / Experience:
Bachelor s degree in a relevant field
Responsibility:
Cloud Platform Expertise:
- In-depth knowledge of multiple cloud platforms such as AWS, Azure, Google Cloud, and others.
- Understanding of cloud-specific services and features.
Cloud Security Fundamentals:
- Familiarity with cloud security principles and best practices.
- Knowledge of shared responsibility models in cloud environments.
- Identity and Access Management (IAM), Network Security, Data Encryption, Key Management System.
Security Compliance:
- Understanding of regulatory requirements and compliance frameworks relevant to cloud environments.
- Experience implementing and maintaining compliance controls.
Cloud Security Services:
- Familiarity with cloud-native security services such as AWS GuardDuty, Azure Security Center, and Google Cloud Security Command Center.
Container Security:
- Experience securing containerized environments (e.g., Docker, Kubernetes) in the cloud.
- Knowledge of container orchestration security best practices.
DevSecOps:
- Integration of security into the DevOps pipeline.
- Familiarity with tools for automated security testing and code analysis.
Cloud Security Monitoring:
- Proficiency in setting up and configuring cloud-native security monitoring solutions.
- Knowledge of log management and analysis in a multi-cloud context.
Threat Intelligence:
- Integration of threat intelligence feeds into cloud security monitoring.
- Ability to analyze and respond to cloud- specific threats.
Scripting and Automation:
Experience with Infrastructure as Code (IaC) tools like Terraform or AWS Cloud Formation.
Risk Assessment and Management:
- Conducting risk assessments for cloud environments.
- Developing and implementing risk mitigation strategies.
- A Multi-Cloud Security Engineer should possess a holistic understanding of cloud technologies, strong cybersecurity fundamentals, and the ability to adapt to the dynamic nature of cloud security.
- Regularly updating skills and knowledge is crucial in this rapidly evolving field.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.