About Us:CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.What we need:- 5+ years' experience with AWS orchestration via Terraform script- 5+ years' experience with CloudWatch/CloudTrail/Guard Duty- 5+ years' experience with AWS WAF- 4+ years' experience with CloudFlare- 3+ years' experience with DataDog- Experience with PagerDuty- Ability to make nuanced threat assessments- Experience in SOPHOS- Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes- Experience in Infrastructure As Code - Ansible / Terraform/ CloudFormation- Hands-on experience implementing various security tools in CI/CD pipeline- Strong experience with any cloud service provider (AWS Preferred)- Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)Responsibilities:- Implement and oversee technological upgrades, improvements and major changes to the cloud security workplace.- Develop solutions,



install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.- Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams.- Penetration testing and container security.- Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.- Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.- Creating and managing security strategies.- Oversee information security audits, whether performed by organization or third-party personnel.- Develop, maintain and publish up-to-date information security policies, standards and guidelines.About the role:- Work independently with vendors and collaborate with colleagues.- Experience negotiating remediation timelines and/or remediate found issues independently.- Ability to implement vendor platforms within CI/CD pipelines.- Experience managing/responding to incidents, collecting evidence, and making decisions.- Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications' needs.- Ability to create DevSecOps security requirements while working on a project.- Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers. (ref:hirist.tech)

📌 CloudSufi - Security Architect - Cyber Security (Noida)
🏢 CLOUDSUFI
📍 Noida