Security Analyst/Engineer Job Description

Role

As security threats change over time, the role of Security Analysts/Engineers is to keep the company's security products standard constantly up to date. They are also responsible for developing, maintaining, monitoring, and repairing security defects throughout the application life cycle.

Responsibilities

Responsible for the implementation of security measures within our rapidly expanding cloud infrastructure
Plan, coordinate, and implement security measures to protect data, software, and AWS cloud resources
Create and maintain the DevSecOps toolsets required to automate, deploy, and manage the application release lifecycle
Own security architecture in the cloud in collaboration with other team members and functional areas
Track security violations and identify trends or exposures that could be addressed by additional training, technical measures, or the use of application tools to enhance security
May participate in simulated attacks or security violations to assess the organization's data security measures
Creation of security metrics, monitoring, and alerting around threats and compromise

Requirements

X years of experience with mobile security, threat modeling, secure coding, authentication, cryptography, cloud and/or network security
Should have an accurate understanding of installation, configuration, implementation, and management of cloud security solutions and offerings
Strong AWS and GCP experience is a must
Experience using Terraform to write and deploy infrastructure as code and Ansible configuration management
Experience in creating hardened AMIs and Container images.
Hands-on experience working with services and tools such as IAM, SecurityHub, GuardDuty, Inspector CloudTrail, CloudWatch, Shield, WAF, KMS, Lambda, CloudWatch, PagerDuty, Slack, CloudCustodian
Mandatory and up-to-date awareness of the latest security trends and hacking techniques
Experience with implementation of security products DLP (Forcepoint), IPS (McAfee, Trend Micro), Anti-Spam ( Forcepoint, Cisco), Virus scanning (EPO) & WAF (Radware, F5)
Must have appropriate knowledge & understanding of the ITIL framework
Must have a proper understanding of TCP/IP, routing protocols & L2/L3 switches
Should have an understating of TCP/IP, DNS, encryption, and routing

Soft Skills

Problem-solving skills
Ability to work independently
Design-oriented
Excellent communication skills

Bonus

Experience with firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, and content filtering is desirable