Develop, document, and maintain security policies, procedures, guidelines, and baselines for cloud and hybrid environments
Collaborate with the SoC team to analyze security policies, improve alert fidelity, and reduce false positives
Work with the Security Engineering team to enhance detection and response capabilities through regular reviews and improvements of security monitoring and alerting workflows
Track and report on the effectiveness of security controls by conducting periodic reviews and fine-tuning measures
Assist in developing risk assessment and security frameworks to establish a consistent risk assessment methodology for cloud and hybrid environments
Conduct in-depth security architecture reviews and threat modeling for new and existing systems to identify attack surfaces, trust boundaries, and design weaknesses, providing prioritized mitigation recommendations
Perform structured risk assessments across infrastructure and application systems in cloud and hybrid environments
Required competencies and certifications
Minimum eight (8) years of relevant IT experience deploying and managing security services for on-premises and cloud environments, including design, development, implementation, or management of security solutions
Strong understanding of risk management methodologies and compliance frameworks
Experience with security tools and technologies such as Security Information and Event Management (SIEM), Data Loss Prevention (DLP), Database Activity Monitoring, Data Security and Protection, Privileged Access Management, File Integrity Monitoring, Web Application Firewall, and Intrusion Prevention
Preferred competencies and qualifications
Professional certifications such as CISM, CRISC, CISSP, or equivalent
Relevant certifications such as AWS Certified Security - Specialty or Certified Cloud Security Professional (CCSP)