Security Consultant with Azure

Brak informacji o wynagrodzeniu

SeniorHybryda·WrocławFull-time

#474174·Dodano dziś·1

Źródło: nofluffjobs.com

Aplikuj teraz

Tech Stack / Keywords

CloudVirtualizationSecurityIAMWeb applicationsISOOWASPNISTrisk managementAgile DevOps REST APICloud securityPublic cloudMicrosoft Azure Active DirectoryMScDegreeNetworkingWeb technologiesJava .NET Node.js Angular KubernetesCISSPCISMAWSAdobe

Podsumowanie oferty

As an Information Security Consultant, you will provide security guidance to project and operations teams delivering and maintaining cloud-based IT solutions throughout the SDLC. You will focus on security assessments, security control design and secure application and infrastructure architecture, including Microsoft Azure.

Wymagania

BSc or MSc degree in Computer Science, Information Technology or a related discipline, or equivalent work experience; advanced degrees are preferred.
At least 7 years of experience in IT disciplines and at least 5 years of experience in information security.
Significant security experience and knowledge in designing, implementing and operating security controls in at least two of the areas described in the offer.
Experience providing and validating security requirements for application and information-system design and implementation, and for cloud services, networking and architectures.
Experience conducting risk, vulnerability, vendor and third-party risk assessments, and recommending risk remediation strategies.
Experience using tools and methods to identify security exposures and business risks.
Knowledge of information security standards such as ISO, NIST and COBIT, and familiarity with attack methods, vulnerabilities and threat modelling.
Working experience with web technologies and programming languages, and with more than one of Java, .NET, Node.js, Angular, Power Apps and Kubernetes.
Background in web services architecture and design, networking principles supporting hybrid cloud models, application development processes and methodologies, and infrastructure and hosting technologies using virtualization and containerization.
Knowledge of cloud infrastructure and public cloud offerings, with experience designing security configurations and controls for Microsoft Azure and Azure PaaS services.
Experience in Active Directory-based identity and access management and authorization design, including integration with IDaaS and federation technologies.
Familiarity with REST API and microservices architecture.

Nice to have:

Vendor-neutral security certification at DoD IAT Level II–III or DoD IAM Level II–III, such as SSCP, Security+, CEH, CISSP or CISM.
Vendor-specific cloud security certification, such as Microsoft AZ-500 or AWS Security Specialty.
Experience as a member of an agile development team or as a contributor in a DevOps operating mode.
Experience with Adobe cloud products.

Obowiązki

Provide security guidance to project and operations teams throughout the SDLC of business IT solutions.
Assess risks related to solutions and their underlying cloud infrastructure, and derive risk treatment options.
Drive security assurance activities with cloud vendors.
Specify and prioritize security requirements and direct the design of security controls.
Supervise security attestation activities and communicate findings, issues and recommendations to team members and management.
Assess the security impact of change requests and provide recommendations and decisions to operations teams.
Direct and manage solution-specific information security assurance with third parties and vendors, including backend reviews and control verification and validation.
Assess threats and vulnerabilities in cloud services, applications and supporting cloud hosting infrastructure, as well as the architecture and networking supporting them.
Facilitate implementation of risk treatment options and security-usability trade-offs with project teams and management.
Specify and facilitate security changes to existing applications operating in DevOps mode.
Supervise security scans, penetration tests and audits, including defining scope and pass criteria, contributing to test scenarios, and documenting findings and decisions.
Communicate findings, recommendations and decisions to different audiences and translate technical security concepts into business risk terminology.
Share knowledge and provide technical assistance to team members, and contribute as a member of an agile team.

EY GDS

40 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz