About Us:

CLOUDSUFI is a Silicon Valley-based specialist Data Engineering & Cloud Technologies player. We pride ourselves in helping in the Data Discovery, Insights and Monetization for organizations. CLOUDSUFI is a Data Science and Product Engineering company building Products/Solutions for Technology and Enterprise industries leveraging the advent of Cloud Hyper Scalers and AI/ML, NLP technologies.

What we need:

- 5+ years' experience with AWS orchestration via Terraform script

- 5+ years' experience with CloudWatch/CloudTrail/Guard Duty

- 5+ years' experience with AWS WAF

- 4+ years' experience with CloudFlare

- 3+ years' experience with DataDog

- Experience with PagerDuty

- Ability to make nuanced threat assessments

- Experience in SOPHOS

- Significant experience with PCI, SOC2, SOX, HIPAA, or other compliance regimes

- Experience in Infrastructure As Code - Ansible / Terraform/ CloudFormation

- Hands-on experience implementing various security tools in CI/CD pipeline

- Strong experience with any cloud service provider (AWS Preferred)

- Preferred Certification - AWS Security/CISSP/CISM (Certified Information Security Manager)

Responsibilities:

- Implement and oversee technological upgrades, improvements and major changes to the cloud security environment.

- Develop solutions, install/configure/integrate IT tools and security processes within an application or organization to help improve the overall IT security posture.

- Set up Static and Dynamic Code Analysis tools, review the results and explain any gaps and potential impact to the teams.

- Penetration testing and container security.

- Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.

- Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.

- Creating and managing security strategies.

- Oversee information security audits, whether performed by organization or third-party personnel.

- Develop, maintain and publish up-to-date information security policies, standards and guidelines.

About the role:

- Work independently with vendors and collaborate with colleagues.

- Experience negotiating remediation timelines and/or remediate found issues independently.

- Ability to implement vendor platforms within CI/CD pipelines.

- Experience managing/responding to incidents, collecting evidence, and making decisions.

- Working with vendors and HM Teams to deploy criteria within WAF and fine tuning it according to applications' needs.

- Ability to create DevSecOps security requirements while working on a project.

- Ability to articulate security requirements during the Architecture meetings and working hand in hand with HM Applications and DevOps Principal Engineers.