We are looking for a Cloud Security DevOps Engineer to join our team and play a crucial role in securing cloud infrastructure, automating security controls, and integrating security into CI/CD pipelines. The ideal candidate will have hands-on experience with tools like Palo Alto (or equivalent) , strong knowledge of cloud security best practices , and proficiency in Infrastructure as Code (Terraform) .
Key Responsibilities:
- Implement and manage cloud-native security tools and solutions (e.g., Palo Alto , SIEM/XSIEM, AWS/OCI security services).
- Automate infrastructure deployment and security policies using Terraform .
- Integrate security checks and controls into CI/CD pipelines (e.g., Jenkins, BitBucket GitHub Actions).
- Monitor cloud environments for misconfigurations, vulnerabilities, and threats.
- Work closely with development teams to ensure security is embedded from design to deployment.
- Perform regular security assessments, incident response support, and log analysis.
- Manage and optimize SIEM/SOAR tools and security dashboards for visibility and alerting.
- Stay updated on emerging cloud security trends and compliance requirements (e.g., ISO 27001, NIST, CIS Benchmarks).
Required Skills Qualifications:
- 3 4 years of experience in cloud security, DevOps, or infrastructure security roles.
- Solid understanding of cloud platforms (AWS, OCI) and their security models.
- Proficiency in Terraform , scripting (Python/Bash), and configuration management.
- Hands-on experience with Palo Alto firewalls , or equivalent security tools.
- Familiarity with CI/CD tools like BitBucket, Jenkins.
- Strong grasp of cloud security best practices , IAM policies, encryption, and network security.
- Experience with container security and Kubernetes is a plus.
- Knowledge of compliance standards (e.g., SOC 2, HIPAA, GDPR) is preferred.
Certifications (Preferred but not mandatory):
- AWS Certified Security Specialty
- Certified Kubernetes Security Specialist (CKS)
- HashiCorp Certified: Terraform Associate
- Certified Information Systems Security Professional (CISSP