Position: Cloud Security Engineer
Company: Intellectsoft
Category: Security
Experience required: 3y
English level: upper

Project description: The project is our client’s core system for managing business operations. Custom in-house solution architectured for scalability and high-load spikes. Our client is expanding his operations from US to Europe and is looking to grow the engineering team to ensure the platform corresponds new business demand and challenges.

As a Cloud Security Engineer, you will be able to work with the IT Security team to implement and automate security features and services in AWS. Additionally, this role is responsible for the documentation, promotion and education of other engineers and developers within IT to further the adoption of security best practices regarding cloud driven workloads and data storage.


Requirements
- Experience working with and provisioning AWS Cloud Security services
- Familiarity with the OWASP top 10 and core application security concepts
- Experience implementing policies regarding PCI and GDPR
- Ability to write automation in Terraform, CloudFormation and Ansible
- Recent experience writing scripts in Python
- Skilled in project management
- Experience working with Atlassian Jira and Confluence
- Familiar with Agile development methodologies
- Ability to read C#, JavaScript, TypeScript and Kotlin
- Strong communication skills
- At least Upper-Intermediate English level


Responsibilities
- Create automation to configure and maintain cloud security services using Terraform, Ansible, Python and Bash
- Implement technical solutions to close identified security gaps
- Educate and train the IT Security team on how to effectively use implemented cloud security services
- Provide cloud security best practices and tools training, education and support to software development teams and systems engineers regarding cloud security best practices and tools
- Maintain and expand automation used to configure AWS SSO and IAM users, roles and policies to following the principle of least privilege
Implement and maintain security related tags and classifications on cloud resources
- Review, manage and harden AWS Security Groups and Network ACLs
- Implement AWS Shield and AWS WAFv2 for core services including automation to manage rules
- Implement security policies and governance received from the IT Security team as it pertains to cloud workloads
- Participate and provide valuable and actionable technical feedback from security product and service reviews to the IT Security team
- Integrate security features and related reporting into CI/CD pipelines including docker image scanning and sonar scanning
- Implement and enforce AWS organizational security control policies
- Implement and maintain AWS Guard Duty, Security Hub and Trusted Advisor
- Work with the DevOps Engineers to harden AWS AMIs, docker images and system images


Benefits
- Good opportunities to work with remarkable teams from all over the world
- Lighthearted, inspiring and open company culture
- Opportunities to travel
- Health Insurance coverage
- English language courses
- Fresh fruit and other snacks onsite
- Fun corporate events :)