Experis IT is partnered with the world's leading provider of secure financial messaging services in their search for a Cloud Security Operations Specialist t o join their team in Manassas, VA.
- This role requires working onsite no less than 2 days a week in Manassas, VA
Summary :
Reporting to the Global Security department, this role contributes to the company internal digital transformation in its evolving adoption of Hybrid Hosting Strategy and enhancing its Cloud Security practices. The ideal candidate will have experience defining and implementing security controls for an evolving cloud environment.
Job Description :
You will undertake moderately complex projects ensuring the security and compliance of cloud infrastructure, compute, and network resources. You will also contribute to the definition of cloud security procedures / controls / policies, within established guidelines; ensuring they are effective and appropriate for the client and its customers, and that they are consistent with the company objectives, company reputation and regulatory requirements.
Job Responsibilities - This is an "Operations / Processes" position. It is NOT Engineering, DevOps or Programming.
Define and maintain cloud security standards and proceduresManage cloud security findings (vulnerabilities and configurations)Operationalize new cloud security features and services designed and developed by the Cloud Platform Security Engineering teamSupport workloads (application and infrastructure security) in their migration to cloudSupport day to day administrative and operational activities for vulnerability and configuration hardening management - assess and triage vulnerabilities and misconfigurations, evaluate security exceptions and risk scenariosBuild an understanding of vulnerabilities and misconfigurations management process, related controls, and key roles and responsibilities.Create and maintain documents and flow charts to document processesTranslate requirements and root cause fixes into Agile user stories or work items for cloud platform / workload engineers and developersEngage and work directly with application owners, onboard users to cloud security tools, provide user support, perform user acceptance tests, and troubleshoot cloud tool issuesDevelop automation to solve repeatable scenarios (eg reporting, reconfigurations, AWS lambda functions) preferably in PythonWhat will make you successful?
We are seeking professionals with :
5 years of relevant work experienceBachelor's degree in computer science, Information Systems or a related fieldTechnical Skills
Experience with Cloud Security services , preferably AWS (Inspector, Security Hub, Config, Macie, Access Analyzer)Experience with security vulnerability and configuration scan report analysisUnderstanding of core cloud services (AWS S3, EC2, EKS, VPC, etc.) and container technologiesUnderstanding of DevOps, Infrastructure as Code and IAM PermissionsUnderstanding of industry standards and compliance requirements, such as PCI-DSS, CIS.Soft Skills
Analytical Thinking : Ability to analyze security threats and vulnerabilities and develop effective mitigation strategies.Problem-Solving : Strong problem-solving skills to address and resolve security issues promptly.Communication : Clear communication skills, both verbal and written English, to collaborate with team members, stakeholders, and clients.Continuous Learning : Staying updated with the latest security trends, threats, and AWS updates.Autonomous, driven, with strong ability to quickly adapt and respond to change.Customer oriented and security mindset - we continually strive to deliver true customer value.Open-minded, solutions oriented, and a true team player.
