Experience: 4 to 6 yrs
Location: BLR
Engineering Graduate - preferably B.E. /B.Tech in IT or Computer Engineering.
The Cloud Security Compliance Analyst is responsible for:
Assessing the conformity of the cloud services
Ensuring conformity concerning Organisation/customers Enterprise Security Protection Baselines (ESPB) guidelines
Defining associated compliance security policies
Job Description:
Assess the compliance of the different Cloud Services using Airbus Standards and Public Cloud Security Standards.
Define the required security controls to make the usage of the cloud services compliant.
Ensure a good quality of the description of the security control taking into account the company context.
Evaluate the relevant severity for each security control.
Ensure the lifecycle of the defined security controls.
Synchronize and work with Cloud Security and Cloud platform stakeholders to ensure the visibility and relevance of the deliveries.
Make propositions to improve the compliance assessment process.
Contribution to Cloud Platform blueprints by providing services compliant IaC.
Requires knowledge of compliance and a commitment to acting with integrity, and will be part of the Cloud Compliance team (Cloud Security Controls & Procedures),
Assess the compliance of the different Cloud Services using Organisation/customers Standards and Public Cloud Security Standards.
Define the required security controls to make the usage of the cloud services compliant.
Ensure a good quality of the description of the security control, l taking into account the company context.
Evaluate the relevant severity for each security control & ensure the lifecycle of the defined security controls.
Synchronise and work with Cloud Security and Cloud platform stakeholders to ensure the visibility and relevance of the deliveries.
Make propositions to improve the compliance assessment process.
Contribution to Cloud Platform blueprints by providing services compliant with IaC.
Skills:
Must Have:
-Strong knowledge of AWS Services and Cloud Security
-Remediation support for Cloud Infra Vulnerabilities
-Remediation support for Security Non-Compliance alerts
-Analysis of false/true positive alerts
-Analysing built-in and customised RQLs
-Cloud compliance exception analyst, Cloud SecOps skills like vulnerability detection and remediation follow-up are a plus
-Good Communication & Stakeholder Management skills
Good to Have:
-Agile methodology knowledge
-Scripting and automation using Python
-Knowledge of GCP or Azure cloud.
-Knowledge of cybersecurity best practices concerning hardening, in an IT/IM Security environment, including standards creation
-Cloud Security compliance or more generic Cyber Security Standards, Cloud Security Engineer and Cloud Threat Modelling
-Cloud Technical knowledge, having practised one CSP for at least 6+ years (AWS and GCP)
Total Experience Expected: 04-06 years
Qualification & Certifications
Engineering graduate - preferably B.E. /B.Tech in IT or Computer Engineering
At least one Certification Preferred:-
AWS Cloud Certifications ( Cloud Practitioner, Security Specialty)
Google Cloud Certifications ( Associate/Professional,
Ready to work at client site in Bengaluru as per the client support hours
At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.
All of our positions are open to people with disabilities.
