IT Senior Cloud Security Engineer (VA813222)
Key Responsibilities:
• Identify cloud security vulnerabilities, assess risk based on business impact, prioritize remediation, track remediation activities, and validate corrective actions
- Lead complex cloud security initiatives and provide technical directions to engineers. Also assist in the design of secure cloud architecture for complex enterprise environments
- Influence architecture and security decisions and prevent insecure configurations from reaching production and implement security gates within deployment pipelines.
- Explain complex security risks to non-technical stakeholders
- Assess cloud security risks and security gaps and recommend appropriate remediations. Create and maintain security documentation and evidence as well as support audits and assessments.
- Review proposed cloud solutions for security risk and define appropriate security and compensation controls.
- Will develop Azure policies to enforce standardization and compliance with enterprise requirements, as well as creating Azure Automation runbooks to support incident response workflows.
- Monitor security events using SIEM technologies and work with VDOT’s SOC team to coordinate incident response activities.
- Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
- Lead investigation and containment of cloud security incidents.
- Review firewall and NSG rule requests and ensure compliance with security standards.
- Must have the ability to provide documentation, architecture topology diagrams, IP schemes and access controls when required.
- Must have the ability to work independently on assigned projects.