Cloud Security and Compliance Engineer

Що робити

Cloud Security Architecture & Hardening: Design and implement technical security controls in AWS, including IAM least-privilege policies, KMS encryption, network segmentation, and secrets management.
Compliance Readiness & Automation: Lead SOC 2 and ISO 27001 audit preparation by identifying security gaps, maintaining compliance automation tools (Vanta, Drata, or AWS Security Hub), and collecting audit evidence.
DevSecOps Integration: Integrate automated security scanning tools (SAST/DAST, container image scanning via Trivy, IaC scanning via Checkov/Tfsec) into CI/CD pipelines (GitHub Actions).
Security Monitoring & Auditability: Configure and manage AWS native security tools (AWS Config, Security Hub, GuardDuty, CloudTrail) to maintain continuous visibility over cloud compliance.
Vulnerability & Incident Management: Perform regular vulnerability scans, evaluate security alerts, coordinate remediation of infrastructure vulnerabilities, and support incident response efforts.

Experience: 2.5+ years of hands-on experience in Cloud Security, DevSecOps, or Information Security Engineering.
AWS Security Depth: Deep understanding of AWS security tools and concepts (IAM policies, KMS, Secrets Manager, Security Groups, VPC Peering, CloudTrail, Security Hub).
Compliance Standards: Practical experience with evidence collection, technical gap remediation, and readiness preparation for SOC 2 and/or ISO 27001 (PCI DSS is a plus).
DevSecOps & Pipeline Security: Hands-on experience embedding security scanners (Trivy, Checkov, SonarQube) into automated CI/CD pipelines (GitHub Actions / GitLab CI).
Scripting & IaC Understanding: Ability to read/write Terraform code to implement security configurations and technical controls.

Practical experience using compliance automation platforms (e.g., Vanta, Drata, Secureframe).
Recognized security certifications (e.g., AWS Certified Security – Specialty, CKS, Certified Information Systems Auditor, or CISSP).
Hands-on experience with Kubernetes security practices and benchmarks (CIS Kubernetes Benchmark).