Cloud Security Engineer

Cloud Security EngineerCloud Security Engineer Project Overview:Define and execute cloud sec ops monitoring and automation strategy for enterprise applications and application components.Own & Execute network level security penetration testing for AWS platformLocation: Remote for now. Client is located in Boston. Candidates will be expected to travel to Boston occasionally in the future.Your Impact:Deep understanding of AWS Security Best Practices.AWS Certified Solutions Architect – AssociateDefine and execute cloud sec ops monitoring and automation strategy for enterprise applications and application components.Own & Execute network level security penetration testing for AWS platformOwnership of WAF, CDN configs, AWS Services (Cognito), EKS, Redshift, S3 etc.Own & Execute network level & application level penetrating testing for the SaaS platform (SAST & DAST)Your Skills & Experience:Deep experience as SecOps for AWSDeep Experience with cloud automation and orchestration technologies such as Jenkins, Kubernetes, GitHub/Git Actions, Docker, TerraformAWS related exposure on EC2, ECS, VPC, Lamda, S3, RDS, DynamoDB, CloudFront, CloudWatch, WAF, Control Tower, SAST, DAST, etcWriting security scripts that leverage cloud platform command line toolsKnowledge integrating Security tools (Veracode | Fortify etc) with the CICD pipelinesKnowledge on KMS / Secret Management toolsKnowledge of AWS/Azure/Google Cloud security services and tools.Experience with cloud provisioning and orchestration tools such as Could Formation, Terraform, and AnsibleExcellent knowledge and expertise in Linux Administration, Shell/Perl/Python ScriptingExperience in OS hardening.Understanding of monitoring tools like New Relic, Nagios, Datadog, Logstash, Splunk etc.Experience in understanding/ fixing Security vulnerabilities towards False positives, DDoS etcUnderstanding SWE/ Owasp vulnerabilitiesIntegrating SaST and DAST tools with code and infrastructure pipelines.Writing Pen testing scripts.