What will I be doing?

• You are going to be responsible for designing, implementing, and supporting a Threat Intel program and perform Threat Modelling;
• Reviewing of threat data from various sources and develops custom signatures or other custom detection capabilities;
• Designing and building security for our cloud environment;
• Working closely with the infrastructure and product teams who are using AWS, and ensuring that they have secure-by-default systems;
• Documenting operational procedures and protocols regarding security;
• Developing and implementing consistent and automated patch management in concert with systems teams;
• Responsible for the analysis to provide indicators for enterprise defensive measures;
• Suggesting and implementing new frameworks and tools to reduce attack surface;

What skills do I need?

• Strong understanding of how to respond and manage incidents in cloud-based environments;
• Demonstrated experience in administration and maintenance of anti-malware tools (NGAV, EDR, and others);
• Huge familiarity of application and perimeter protection solutions (WAF, Firewall's, CASB, and others);
• In-depth knowledge of security frameworks such as CIS Controls, OWASP, NIST, and others;
• Knowledge with Cloud platforms (majorly AWS, but can be Azure and GCP as well);

• Great background in managing and operating SOC solutions and procedures (Dashboards, Alerts, Integrations, and more);
• Experience with log aggregation/concentration (Wazuh, ELK stack, Graylog, and others) and also SIEM solutions (Splunk, Log Rhythm, Sumo Logic, and others);
• Understanding of how to build security on CI/CD environments;
• Know-how of containerization technology such as Docker and Kubernetes and the ability to deploy hardened configurations using orchestration tools (Ansible, Chef, Puppet, or others);
• Great background in data protection solutions (Information Classification solutions, DLP, Data Mapping, Encryption, and others);
• Knowledge in secrets management solutions (Vault, AWS Secrets, AWS KMS, and others) and IAM administration and management (SSO, AWS IAM, and others);