Role Overview:

We are seeking a highly skilled and experienced Senior Software Consultant on Cloud Security to join our dynamic team. As a senior consultant, you will play a pivotal role in designing, implementing, and assessing robust cloud security solutions for our clients. You will provide expert guidance on security best practices, conduct security assessments, and contribute to the development of cutting-edge security strategies in cloud environments. This role requires a deep understanding of cloud platforms, security frameworks, and threat landscapes, coupled with strong communication and consulting skills.

Responsibilities:

Cloud Security Architecture & Design:

• Design and implement secure cloud architectures across various platforms (AWS, Azure, GCP, etc.).
• Develop and maintain security policies, standards, and procedures for cloud environments.
• Advise clients on cloud security best practices and compliance requirements (e.g., NIST, ISO 27001, GDPR, HIPAA).

Security Assessments & Audits:

• Conduct thorough security assessments and penetration testing of cloud environments.
• Identify and analyze security vulnerabilities and risks, and provide actionable recommendations.
• Perform security audits and compliance checks to ensure adherence to relevant standards.
• Perform Cloud Security Posture Management(CSPM) assessments.

Incident Response & Threat Management:

• Develop and implement incident response plans for cloud security incidents.
• Monitor cloud environments for security threats and anomalies.
• Analyze security logs and alerts to identify potential security breaches.
• Lead incident response activities and provide post-incident analysis.

Consulting & Client Engagement:

• Act as a trusted advisor to clients on cloud security matters.
• Conduct workshops and presentations to educate clients on security best practices.
• Develop and deliver security training materials.
• Communicate complex security concepts clearly and effectively to both technical and non-technical audiences.
• Manage client relationships and ensure client satisfaction.

Research & Development:

• Stay up-to-date on the latest cloud security trends, technologies, and threats.
• Evaluate and recommend new security tools and technologies.
• Contribute to the development of internal security tools and methodologies.
• Contribute to thought leadership activities, such as writing white papers and presenting at conferences.

Automation:

• Implement security automation tools and practices.
• Develop Infrastructure as Code security best practices.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related field.
• Minimum 12+ years of experience in cloud security consulting or a related role.
• Deep understanding of cloud platforms (AWS, Azure, GCP) and their security services.
• Strong knowledge of security frameworks and standards (NIST, ISO 27001, GDPR, HIPAA).
• Experience with security assessment tools and techniques (e.g., vulnerability scanners, penetration testing tools).
• Experience with security information and event management (SIEM) systems.
• Experience with Infrastructure as Code(IaC) and security best practices regarding IaC.
• Excellent communication, presentation, and interpersonal skills.
• Relevant certifications (e.g., CISSP, CCSP, AWS Certified Security - Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer) are highly desirable.
• Experience with container security(Docker, Kubernetes).
• Experience with DevSecOps practices.

Preferred Skills:

• Experience with scripting languages (e.g., Python, PowerShell).
• Experience with cloud security automation tools.
• Experience with threat modeling and risk assessment methodologies.
• Experience with Zero Trust Architectures.