Cloud SecOps Engineer

Job Summary

This position is part of the Cybersecurity Team for the Werfen Cloud solutions. The team contributes on designing, developing, validating, and deploying secure cloud applications

Key Accountabilities

Configuration and Maintenance

• Ensure compliance of information assets with security requirements, policies, and procedures
• Manage Access Control and Identity Management
• Oversee vulnerability management for all cloud assets
• Propose and integrate new security tools and supports, ensuring alignment with Werfen’s Information Security Policy and associated procedures

Design and Defense

• Implement and optimize Werfen Global SOC Security Configuration, ensuring cost-effective security services
• Act as the primary contact with Werfen Global SOC, participating on complex Incident Response (L3)

Testing and Remediation

• Regularly screen and test the platform for vulnerabilities to ensure robust security.

Policy Development

• Develop policies that guarantee all systems adhere to regulatory security standards and compliance requirements.

Investigation

• Collaborate with external SOC and SecOps teams to manage security incidents
• Participate in root cause analysis investigations for incidents
• Enhance security practices through a continuous improvement cycle

Networking/Key relationships

•      DevOps team to refine processes for cloud deployments

•     SW development teams to provide support on secure software development

•      Quality Assurance department to provide support on automating security testing

Minimum Knowledge & Experience required for the position:

• Education: Engineer, computer Science or other Technical degree, or equivalent work experience
• Experience:
  • At least 3 years of hands of experience with AWS
  • Experience of Cloud Security Tools
  • Desired certification on AWS Security.

Skills & Capabilities:

Cloud Security Engineers shall have:

• Strong security background
• Strong technical background
• Network security expertise
• Knowledge on ISO 27001, GDPR, and HIPAA
• Programming and scripting skills

Cloud Security Engineers shall show:

• Strong analytical capabilities, paying attention to detail
• Proficiency in research and analysis
• Quick adaptability to changes
• Strong verbal and written communication skills in English

Travel requirements:

15% of the time