As a Cloud Information Security Operations Lead, you will play a pivotal role in safeguarding our cloud infrastructure and customer data. Your responsibilities will include:
- Security Operations:
- Oversee daily security operations, including monitoring, threat detection, incident response, and vulnerability management.
- Analyze security logs and alerts to identify and respond to security incidents.
- Implement and maintain security tools and technologies to protect our cloud environment.
- Conduct regular security assessments and penetration testing.
- Stay up-to-date on the latest security threats and vulnerabilities.
- Incident Response:
- Develop and maintain incident response plans.
- Lead incident response efforts, coordinating with various teams to contain and mitigate security breaches.
- Conduct post-incident analysis to identify lessons learned and improve future response times.
- Highlight the need for proactive security measures, such as threat hunting and vulnerability scanning.
- Security Compliance:
- Ensure compliance with industry standards and regulations (e.g., PCI DSS, HIPAA, GDPR).
- Conduct regular audits and certifications to maintain compliance.
- Work with legal and compliance teams to address security-related legal and regulatory issues.
- Security Engineering:
- Collaborate with engineering teams to design and implement secure cloud infrastructure.
- Review and approve security designs for new projects and services.
- Develop and maintain security automation scripts and tools.
Strong understanding of cloud security principles and best practices.Experience with cloud platforms (AWS, Azure, GCP) and security tools (e.g., SIEM, SOAR, EDR, NDR, TIP).Knowledge of network security, endpoint security, and application security.Experience with scripting languages (Python, PowerShell) and automation tools.CISSP, CISM, or other relevant certifications.Strong problem-solving and analytical skills.Excellent communication and interpersonal skills.Ability to work independently and as part of a team