Job Description :

Responsible for supporting information security and risk activities, using sound technical capabilities to review and adjust information security processes, supporting the delivery of security solutions, recommending improvements to security strategies and managing external service providers.

Specialisms :

- Information Security Engineering

- Information Security and Risk Management

- Operational Security Management

- Governance, Risk and Compliance

- Forensics and Incident Response Management

- Application Information Security

Key Responsibilities :

- Lead changes to security processes and procedures, fix sophisticated security issues, review security architectures and manage security solutions from identification to implementation.

- Build, develop and actively engage in the continuous improvement of security engineering practices and the quality of Cyber advice, mentorship and standards.

- Architect and maintain multiple AWS Products and their automation deployments.

- Conduct security architecture reviews based on frameworks such as AWS Well Architected framework and conduct risk reviews.

- Work within an agile delivery squad directly contacting customers, development teams, business product owners and 3rd party vendors.

Tech Stack :

- AWS Security Engineering : Cloud Security Center, cloud firewall, WAF, AWS CLI, Python, Bash, PowerShell, Ruby, Lambda (NodeJS / Python).

- Infrastructure as Code : ADO pipelines, Terraform, cloud automation and resource orchestration.

- Resource Access Management (RAM) and integration with identity providers.

Required Criteria :

- 4+ years of experience in technical solutions within AWS platform to improve security posture.

- Develop and deploy security solutions using CloudFormation, Terraform and automation languages.

- Mentor and advise platform teams and customers regarding security risks through risk assessments, threat modelling and security testing.

- Publish AWS security standards and architectural patterns.

- Support platform-based security incidents and liaise with Cloud Security Engineering, Security Architecture and Enterprise Architecture teams.