20 Oct
Skyleaf Consultants LLP
Ghaziabad
Work Experience - 5 to 9 Yrs
Notice Period – Immediate joiner to max 30 days.
Job Location – Bangalore
Looking for candidates having working experience in B2C / product-based / startup companies.
What you'll do:
- Security policy development
- Take a proactive approach to security
- Automate security processes
- Compliance & Audits
- Security monitoring
- Collaboration between security and development teams
What we’re looking for:
- 5+ years of experience maintaining large-scale production environments in AWS.
- Deep knowledge of AWS, especially with services like S3, CloudFront, ELB, Lambda, VPC, Route 53, RDS, Elasticache, CloudWatch, EC2, Security Center, Kubernetes, ECS/Fargate, ECR.
- Expertise in AWS IAM,
security groups, VPC configuration/connection, and encryption services (e.g., AWS KMS), AWS WAF, AWS Shield.
- Experience with version control systems (e.g., Git).
- 5+ years administering Linux environments with programming/scripting experience (e.g., Python, JavaScript, PowerShell).
- Experience in setting up security policies, processes & automation.
- Solid understanding of networking principles and how it applies to data flow and security.
- Strong working knowledge of compliance, AWS & cloud security.
- Strong background in implementing and managing security controls, conducting security assessments, and remediating vulnerabilities.
- Proficiency in using AWS security tools such as AWS Config, AWS CloudTrail, AWS GuardDuty, and AWS Security Hub for monitoring, auditing, and managing security incidents.
- Experience with automating security processes.
- Proficiency with Infrastructure as Code (IaC) tools like Terraform, Ansible, and scripting languages (Shell, Python).
- Experience in automating deployments of cloud-based highly-available services (e.g., AWS EC2/RDS, Docker, Kubernetes). Experience in integrating security into CI/CD practices.
- Experience with monitoring, logging, and analysis tools (e.g., CloudWatch, Datadog, Sumo Logic, New Relic).
- Experience with compliance & audits.
- Someone with worked on compliance & audits for successfully completing industry compliance and/or legal obligations.
- Strong DevSecOps culture advocate.
- Someone who advocates & promotes a strong DevSecOps culture within the organization.
- Someone who can work within agile and lean software development teams.
- Someone who can educate other Devs on security as well as work with other SecOps team members.