Position's Contributions to Work Group:
- Expert level proficiency with Prisma Cloud and be capable of deploying the tool in a variety of environments, including:
- ECR/ECS/Fargate
- OpenShift
- Docker/Kubernetes
- Azure DevOps Pipelines
- Work with security teams in key business units to remediate vulnerabilities and compliance findings
- Partner with development teams to secure CI/CD pipelines
- Develop deployment architecture for agent-based scanning of image repositories
- Assist with the development of baseline security controls and translate that into Prisma policies
- Mentor junior team members on Prisma Cloud and cloud security best practices
- Tracking open security issues and escalating as necessary to ensure remediation
Typical task breakdown:
- Expert level proficiency with Prisma Cloud and be capable of deploying the tool in a variety of environments, including:
- ECR/ECS/Fargate
- OpenShift
- Docker/Kubernetes
- Azure DevOps Pipelines
- Work with security teams in key business units to remediate vulnerabilities and compliance findings
- Partner with development teams to secure CI/CD pipelines
- Develop deployment architecture for agent-based scanning of image repositories
- Assist with the development of baseline security controls and translate that into Prisma policies
- Mentor junior team members on Prisma Cloud and cloud security best practices
- Tracking open security issues and escalating as necessary to ensure remediation
Work environment:
- Hybrid work model (3x in office)
Education & Experience Required:
- Bachelors Degree in a related field preferred.
- Advanced certification in Cloud Security such as AWS Security Specialty, SANS GCLD, or AZ-500 preferred.
- Minimum of 5 years exp in Cloud or Cloud security.
Technical Skills
(Required)
- Experience securing CloudFormation/Terraform IaC
- Proficiency in measuring and securing IaaS, PaaS, and SaaS environments in AWS and Azure
- Experience with Python, YAML, JSON
- Understanding of the AWS Well-Architected Framework and most CSP-native security tools such as Service Control Policies, CloudWatch, Control Tower, or Azure Security Center
(Desired)
- Ability to move fast in an environment with ambiguity at times, and with competing priorities and deadlines.
- Extensive experience deploying security best-practices in public cloud environments
- Performs information gathering and research on key elements of IT security policies.
- Assists senior colleagues in identifying and analyzing critical issues in IT security policies.
- Executes IT security policies and standards within a specific region in organization.
- Conducts performance reviews on implementation of IT security policies.
- Generates status reports for senior management to ensure the implementation of IT security policies.