Veltris - Cloud Security Engineer - Vulnerability Management

What you will do :

- Implement cloud-based defense-in-depth controls for Cloud environments.

- Improve the cloud security posture by configuring guardrails like AWS Config, Guard Duty, Inspector, Security Hub, Security Control Policies, etc.,

- Develop cloud-based programs to detect possible vulnerabilities and risks

- Design and Manage identity and access management and RBAC policies.

- Hardening cloud platforms and services configurations such as encryption at rest and transit.

- Build automation scripts using API calls and CLI to identify and remediate non-compliant cloud configurations.

- Leverage Infrastructure as Code (IaC) to automate cloud security configurations and deployments.

- Automate security controls, data and processes to provide better metrics and enhance operational support.

- Responsible for integration of security development practices into DevOps life cycle

- Create and maintain detailed technical documentation and runbooks for implemented security controls and processes.

- Perform security assessments, including incident analysis, vulnerability scans, patch status tracking, and secure baseline evaluations.

- Implement container scanning for any vulnerabilities and Configure WAF rules.

- Assist in investigating and resolving routine security questions and inquiries.

- Coordinate and track all security-related audits.

You are a successful candidate if :

- 4-6 years of practical experience with AWS security as a Cloud or Security operations engineer.

- Networking expertise including Subnetting, Routing, ACL, and Security Groups.

- In-depth experience around CLI, Cloud principles, VPC, Cloud native services and Cloud APIs in AWS environment

- Expertise in Cloud automation tools - Terraform, Cloud formation, version Control systems like GitLab/GitHub

- Solid scripting skills in languages such as Python and Shell scripting.

- In depth knowledge of common monitoring tools like Cloud watch & Datadog.

- Strong expertise with CI/CD solutions.

- Experience working with container technology including AKS or ECS/EKS

- Excellent problem solving, interpersonal, communication and presentation skills.

- Experience working in a fast-paced, Agile environment

- Experience in cyber security capabilities (SIEM, SOC, Vulnerability Management, Threat intelligence, etc.)

- Exposure to regulatory frameworks such as GDPR, HIPAA, and PCI-DSS.