Position: Cloud Security Architect/Engineer
Company: CC-Interactive
Category: Data Engineer
Experience required: 3y
English level: intermediate

**Responsibilities:**

Collaborate with technologists and architects across the company to make technical security recommendations for cloud native development whilst recognising the current multiple private clouds already in place and currently operating
Define and build security design patterns for cloud-based security services leveraging best in class tools and recommended procedures
Responsible for the creation of a cloud security framework to articulate the security strategy to various audiences (senior technology management, other architecture disciplines, application and systems development groups)
Ensure consistency with cloud architecture guiding principles across the AWS, Azure and GCP infrastructures
Provide expert services and knowledge of NIST CSF, SOC2, SOC3, ISO 27001
Develop processes for documenting, assessing, and managing security risk in a cloud environment
Develop policies for using cloud services at the Department, including required security policies and artifacts
Work as a product owner for security features
Collaborate with program teams to capture design inputs for product security and privacy
Design cloud security architectures and strategies
Four or more years of experience in Security, Compliance and risk management, including privacy, controls within a large complex regulated environment.

**Required qualifications and skills:**
Be a thought leader and influencer in the emerging cloud architecture best practices which includes continuous delivery, security, infrastructure as code, automation, immutable infrastructure and service discovery.
Create execution strategies that focus on embedding security controls into existing design and build practices to allow proactive rather than reactive focus.
Manage applicable standards and procedure translating security requirements into easily understandable and achievable goals.
Maintain a deep understanding of core security disciplines, with close attention to developing industry trends.
Work with teams composed of Software Engineers, UI Design, Network and Infrastructure, Platform and the Product Owners to help lead the creation, validation, and integration of comprehensive security solutions into their products.
Technical knowledge in routing, firewall policy, Anti-Distributed Denial of Service (Anti-DDoS), Web Application Firewall (WAF), Intrusion Prevention System (IPS), Security Information and Event Management (SIEM), secure credential management, virtualization, service oriented architecture, development practices, operational practices, micro services architecture and database design
Demonstrated good communication skills and a history of running numerous time sensitive projects involving multiple cross-functional teams and background in large scale security oversight
Experience in defending attacks utilizing information security technologies, including web application firewalls, anti-DDoS technologies, advanced anti-malware solutions, network forensics
Understanding of incident response processes and artifact collection for digital forensic investigation purposes
Understanding of enterprise IT security risk assessments and related frameworks (e.g., SOC2, ISO 270XX, NIST CSF, NIST 800-XX, COBIT, ) and industry best practices
Demonstrable understanding of network security, operating systems, authentication/authorization/audit systems, and use of cryptography.

**About CC-Interactive:**
For the last 20 years CC-Interactive has been an active player on the Customer Experience Management systems market in Ukraine and Europe.
Join a team of around 50 IT specialists -with the majority working from Ukraine.