Role: Sr AWS Cloud Security Analyst with (Akamai Application Firewall)
LOCATION Hyderabad, India (Offshore)
DURATION 3-6 months
I would like someone who has targeted experience implementing the Akamai Web Application Firewall solution, understanding the full gamut of traffic redirection through DNS change and certificate issuance, required testing in multiple stages with adherence to deployment methodology, and can assist with WAF rules monitoring and tuning. I am looking for a self-starter with very strong project management and communication skills, as this candidate is expected to lead the rollout of a centralized WAF solution with Akamai across 10 applications in a 6-month period.
To summarize, I'm looking for a Cloud security analyst/engineer who has direct experience deploying Akamai with strong organizational skills and can also support AWS Security & CNAPP (container) monitoring.
Job description:
- Core responsibilities include:
- Cloud Security Controls: Design and implement security controls across AWS, Azure environments.
- Continuously enhance our cloud security posture management (CSPM) program to identify and remediate risks in configurations and policies.
- Ensure SOC 2 cloud security controls are always executed and auditable.
- Container & Kubernetes Security: Oversee security for containerized applications and Kubernetes clusters. Establish best practices for container image security, pod security policies, and cluster network segmentation to protect our microservices.
- Overall, You must:
- Ensure cloud systems and solutions are secure by design and champion a secure guardrails approachautomating security checks and educating teams to build secure systems from the ground up.
- Conduct continuous vulnerability and compliance validation to ensure ongoing adherence to security policies and regulations.
- Monitor cloud environments for security incidents and ensuring rapid response through automated mechanisms.
- Serve as subject matter expert on cloud technologies and security solutions
- Perform technical security design, architecture, change and/or configuration audits/reviews on our hosting environments including Azure & AWS, servers, network devices, endpoints, and security technologies deployed (CNAPP, MDM, WAF, DDoS, etc.)
- Collaborate with cross-functional teams, including developers, cloud engineers, architects, and operations, to embed security in critical initiatives including API security.
- Foster a culture of continuous improvement, innovation, and knowledge sharing across the organization and staying updated on the latest cloud security threats and advancements.
Requirements:
- Bachelor's degree in computer science, Information Security, or related professional experience.
- 6+ years experience in cloud security
- 3+ years hand-on experience working with containerized environments
- Excellent understanding of Azure, AWS, k8s
- Experience working with cloud security posture management tooling
- Hands-on experience on threat modeling and security architecture reviews.
- Hands-on experience of working with compliance requirements and turning them to technical controls: Ability to implement and manage security controls in cloud environments
- Knowledge of cloud security best practices and industry standards
- Strong analytical and problem-solving skills
- Ability to think critically and make data-driven decisions
- Excellent documentation skills, including the creation of procedures, process documentation, and user documentation
- Certifications: Relevant certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or AWS Certified Security Specialty are preferred.
- Technical Skills: Proficiency in cloud platforms (e.g., AWS, Azure), security tools, and technologies (e.g., firewalls, intrusion detection systems, encryption).
- Knowledge: Strong understanding of cloud security principles, risk management, and compliance frameworks.
