Role

Does the constant stream of cyber breach-related news keep you up at night? Are you passionate about technology and want to redefine the status quo? Do you want to help solve security problems faced by the C-suite at some of the world’s most iconic brands? Come join us and help build a secure digital society!

We are seeking cloud and application security engineers to join our advisory team within our Cyber security practice, to respond to strong demand-led growth.  Our security engineers help clients to define, design, and build security for their Cloud environments.   

Using innovative methods and partnerships with leading vendors, your role involves the following:

1. Work collaboratively with teams across other functions to assess, design and deliver the security solutions that would respond to cybersecurity threats faced by our clients.

2. Perform hands-on risk reduction through build / deployment of security mechanisms required to manage cyber risks..

You may have worked within a corporate organisation or across multiple industries, or have developed a specialism in a particular sector. Whichever of these describes you, you will be developing a strong track record of credibility as a trusted advisor and an expert in Cloud Security Engineering.

You will also have strong relationship building skills and you’ll be keen to support our practice senior leaders to respond to client needs and win new work.

Roles and responsibilities - 

We are seeking a number of Cloud and Application Security Engineers to join our practice, to respond to strong demand-led growth. The core responsibilities of this role include:  

• Working closely with other teams to resolve security issues within their CI/CD pipeline and cloud configurations to ensure security-by-design.

• Providing relevant teams with education and awareness on latest cloud security initiatives, and delivering training when necessary.

• Developing and implementing cloud platform security controls incl. container and serverless security

• Enabling DevSecOps through defining, designing and building security guardrails for developers.

• Create process documents and diagrams to increase the overall maturity of secure development practices

• Monitor operational security of environments and respond to threats. Evaluate alerts and events generated by security tools, and help fine-tuning the security solutions to minimise the amount of false-positive alerts

• Build the documentation and automation scripts necessary for the security operations team to take appropriate actions.

• Work with the Cloud Operations teams in the definition and implementation of security standards and best practices

Required Skill Set - 

• Demonstrable experience in a similar role, with a proven track record of successful implementations within client-facing roles.

• Working experience in using and implementing  continuous integration technologies. (e.g. Chef, Puppet, Docker, Jenkins, Ansible, or related tools).

• Experience in integrating security into the SDLC.

• Experience in performing cloud-related technical security assessments and remediation, as well as application security assessments.

• Deep understanding of software delivery technologies including but not limited to Terraform, CloudFormation, and/or other IAAC offerings.

• Proficiency and understanding of key differences between most popular cloud provider solutions and cloud orchestration tools (e.g. Azure, AWS, GCP, Kubernetes, Docker, etc.)

• Strong communication and collaboration skills are essential.

• Having Cloud security certifications such as CCSP or CCSK is desirable

• Experience working within an agile team

• Practical, hands-on experience with major cloud providers security technologies