About the role
The core responsibilities for the job include the following:
Cloud Security (AWS):
- Design, implement, and maintain security controls across AWS environments.
- Configure and manage AWS security services, including IAM, AWS Organizations, GuardDuty, Security Hub, Inspector, WAF, KMS, Secrets Manager, CloudTrail, and Config.
- Perform security assessments, cloud posture reviews, and remediation activities.
- Implement least privilege access controls and identity governance.
Kubernetes and Container Security:
- Secure Kubernetes clusters (EKS preferred) and containerized workloads.
- Implement security controls for RBAC, network policies, pod security standards, admission controllers, and service mesh security.
- Conduct container vulnerability assessments and image scanning.
- Manage runtime protection and container security platforms.
- Ensure compliance with Kubernetes security best practices.
Secure CI/CD and DevSecOps:
- Integrate security into CI/CD pipelines using DevSecOps principles.
- Implement and maintain: SAST, DAST, SCA (Software Composition Analysis), Secrets Scanning, Container Scanning, and IaC Security Scanning.
- Automate security checks within Jenkins, GitHub Actions, GitLab CI/CD, or similar tools.
- Establish secure release and deployment processes.