Cloud Security Specialist- SOC2

2 weeks ago

Orlando, United States CUES Inc. Full time

Job Summary / Objective


This role presents an exciting opportunity for an accomplished [AWS] Solution Architect to direct and guide all matters related to security architecture design for our established commercial Cloud SAAS application. The Specialist will serve as the subject matter expert for secure cloud technology design, secure development, and implementation within the CUES software division.


With a near-term objective of enabling our commercial cloud SAAS solution to achieve a SOC2 compliance audit certification, the longer-term goal is to create and maintain security strategy plans and roadmaps - and influence the ongoing planning and execution of the roadmaps - with measurable benchmarks to show ongoing progress or deficiencies. Whether from 5G, the internet of things, AI, drones, autonomous robots and AR/VR, the successful candidate will serve as the subject matter expert for CUES secure cloud technology design, development, and implementation globally.



Essential Job Functions and Duties


Working closely with the existing CUES software Cloud team, the CSS will assess cloud security risks by reviewing all existing cloud related policies, standards, and guidelines to establish a baseline gap analysis to ensure security is designed and delivered to meet business use cases and requirements.


Document all Application-specific controls to prepare for SOC2 audit using AWS and 3rd party tools.


Establish a security architecture with a focus on threat detection, security control enforcement, and incident response.


Possess solid relationship-building skills to work successfully with outside auditors and partners.


Assist the Implementation team with migrations from on-prem systems to our cloud platform while establishing and maintaining a high level of security and compliance.


Maintain Security update posts released by AWS to mitigate risks.


Develop and execute strategies to mature the security posture of our commercial application, as well as mentor our CloudOps implementation specialists and analysts.


Ensure that relevant audit and security logs are collected to a central location and exposed to the DevOps team for triage, analysis, and incident response compliant with SOC2.


Draft and review cloud related policies, standards, and guidelines to ensure security is designed and delivered to meet commercial requirements and SOC2 compliance.


Have impeccable administrative and customer service skills.


Actively participate in various architecture forums to champion and evangelize the differentiated and unparalleled CUES SAAS security methodology for successful client acquisition and provide expertise on security-related issues to CISO-level constituents.


Required Competencies


Six (6)+ years of experience with hands-on Security Architecture and/or Engineering

Five (5)+ years of experience with Amazon Web Services (AWS) and/or Microsoft (MS) Azure

Three (3)+ years of experience deploying security strategy and implementation, including the deployment of Security Tools within an AWS ecosystem (Conformance Packs, Foundations Benchmarks, Audit Manager, etc.), Network IPS/IDS, Identity and Access Management (IAM), Zero Trust, Security Access and Service Edge (SASE) and Security Frameworks and Methodologies, and Threat Hunting and Modeling.

Experience with SaaS, IaaS, and PaaS architectural solutions within Amazon Web Services

Experience in Cloud, DevSecOps, Container Security, IAM patterns, WAF/CDN/DDoS services, security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies

Experience in security architecture methodologies like SABSA, OSA, O-ESA, security framework and standards like NST CSF, ISO, PIC, SOC2, and best practices like CIS benchmarks, defense in depth.

Experience in working through SOC 1, SOC2 certification process / report preparation

Experience with data protection, cryptography, key management, SAML, AWS Cognito, OKTA, DUO

Hands on expertise with AWS Security Tools including: - AWS Config, CloudTrail, Security Hub, Inspector, Audit Manager, Systems Manager, WAF, etc.

Broad knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems such as Securonix Next Gen, intrusion detection/prevention systems (IDS/IPS) such as Securonix Cloud Ingestor, public key infrastructure (PKI), antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls

Experience architecting SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, file integrity monitoring (FIM), data loss prevention (DLP) and other network and system monitoring tools

Experience performing threat modeling and design reviews to assess security implications and requirements for introduction of new technologies

Possess excellent communication skills to persuasively articulate the technical advantages of relevant security architectures and align stakeholders to make positive buying decisions

_________________________________

  • Cloud Security Specialist- SOC2

    Found in: Appcast US C2 - 2 weeks ago

    Orlando, United States CUES Inc. Full time

    Job Summary / ObjectiveThis role presents an exciting opportunity for an accomplished [AWS] Solution Architect to direct and guide all matters related to security architecture design for our established commercial Cloud SAAS application. The Specialist will serve as the subject matter expert for secure cloud technology design, secure development, and...

  • Cloud Security Specialist- SOC2

    Found in: Appcast Linkedin GBL C2 - 2 weeks ago

    Orlando, United States CUES Inc. Full time

    Job Summary / ObjectiveThis role presents an exciting opportunity for an accomplished [AWS] Solution Architect to direct and guide all matters related to security architecture design for our established commercial Cloud SAAS application. The Specialist will serve as the subject matter expert for secure cloud technology design, secure development, and...

  • AWS Cloud Engineer

    1 week ago

    Orlando, United States Stax Full time

    Job DescriptionJob DescriptionDescription:We are seeking an experienced Cloud Engineer to join our team with an emphasis on Security in the Cloud. This role involves designing, implementing, and managing the security infrastructure within AWS to ensure the integrity, confidentiality, and availability of our financial services. The ideal candidate will have a...

  • AWS Cloud Engineer

    22 hours ago

    Orlando, United States Stax Full time

    Job DescriptionJob DescriptionDescription:We are seeking an experienced Cloud Engineer to join our team with an emphasis on Security in the Cloud. This role involves designing, implementing, and managing the security infrastructure within AWS to ensure the integrity, confidentiality, and availability of our financial services. The ideal candidate will have a...

  • Information Technology Security Manager

    3 days ago

    Orlando, United States Emovis Full time

    About Emovis At Emovis we offer state-of-the-art toll-based mobility solutions and associated services for urban and interurban environments.As the competence center for Abertis, a worldwide leading concessionaire managing 5000 miles of high-capacity high-qualitymotorways, we look to bring the quality and efficiency demanded by Abertis to public sector...

  • Information Technology Security Manager

    Found in: Appcast US C2 - 4 days ago

    Orlando, United States Emovis Full time

    About Emovis At Emovis we offer state-of-the-art toll-based mobility solutions and associated services for urban and interurban environments.As the competence center for Abertis, a worldwide leading concessionaire managing 5000 miles of high-capacity high-qualitymotorways, we look to bring the quality and efficiency demanded by Abertis to public sector...

  • Information Technology Security Manager

    Found in: Appcast Linkedin GBL C2 - 4 days ago

    Orlando, United States Emovis Full time

    About Emovis At Emovis we offer state-of-the-art toll-based mobility solutions and associated services for urban and interurban environments.As the competence center for Abertis, a worldwide leading concessionaire managing 5000 miles of high-capacity high-qualitymotorways, we look to bring the quality and efficiency demanded by Abertis to public sector...

  • Cloud Security Architect

    1 week ago

    Orlando, United States CareerBuilder Full time

    At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities. The Role Are you passionate...

  • Security Specialist

    Found in: beBee jobs US - 2 weeks ago

    Orlando, Florida, United States Darden Restaurants, Inc. Full time

    Security Specialist 1000 Darden Center Dr, Orlando FL 32837 Job Description JOB OVERVIEW:The Security Specialist is responsible for compliance with Corporate Security policies, procedures, best practices, post orders, and incident protocols in all areas of security. The Security Specialist will partner with varying teams to provide Life Safety support and...

  • Security Specialist

    Found in: beBee S US - 1 week ago

    Orlando, United States Darden Restaurants, Inc. Full time

    Security Specialist 1000 Darden Center Dr, Orlando FL 32837 Job Description JOB OVERVIEW:The Security Specialist is responsible for compliance with Corporate Security policies, procedures, best practices, post orders, and incident protocols in all areas of security. The Security Specialist will partner with varying teams to provide Life Safety...

  • Application Security Specialist

    2 weeks ago

    Orlando, United States Touchpoints Full time

    In-depth experience with Application Security maintenance, Compliance, Cloud, and Vulnerability support.Experience with Nessus, CrowdStrike, Tanium, and other similar tools.Hold current CISSP or CCSP certifications.Available for onsite.

  • Application Security Specialist

    Found in: Appcast US C2 - 2 weeks ago

    Orlando, United States Touchpoints Full time

    In-depth experience with Application Security maintenance, Compliance, Cloud, and Vulnerability support.Experience with Nessus, CrowdStrike, Tanium, and other similar tools.Hold current CISSP or CCSP certifications.Available for onsite.

  • Application Security Specialist

    Found in: Appcast Linkedin GBL C2 - 2 weeks ago

    Orlando, United States Touchpoints Full time

    In-depth experience with Application Security maintenance, Compliance, Cloud, and Vulnerability support.Experience with Nessus, CrowdStrike, Tanium, and other similar tools.Hold current CISSP or CCSP certifications.Available for onsite.

  • Cloud Administrator

    7 days ago

    Orlando, United States latitude Full time

    Job Description Job Description The Cloud & Infrastructure Administrator will be responsible for providing support for all activities related to cloud and infrastructure across a variety of platform and operating systems. This individual must possess a thorough understanding of cloud and infrastructure technology backed with hands-on operational experience...

  • AWS Cloud Engineer Terraform Lambda Specialist

    7 days ago

    Orlando, United States Intelecox Full time

    Job Title: AWS Cloud Engineer - Terraform & Lambda Specialist Location: Remote Type: Contract Company: Intelecox.Inc Job Summary: We are seeking an experienced AWS Cloud Engineer with a strong background in upgrading Terraform to the latest version and refining Lambda functions for improved functionality. The ideal candidate will play a crucial role in...

  • Cloud Administrator

    2 weeks ago

    Orlando, United States Latitude, Inc. Full time

    Job DescriptionJob DescriptionThe Cloud & Infrastructure Administrator will be responsible for providing support for all activities related to cloud and infrastructure across a variety of platform and operating systems. This individual must possess a thorough understanding of cloud and infrastructure technology backed with hands-on operational experience on...

  • Specialist, Security

    Found in: beBee jobs US - 2 weeks ago

    Orlando, Florida, United States Walmart Stores Full time

    Position Summary...What you'll do...Walmart Specialty Pharmacy is a one-off business unit within Walmart; specialized in the delivery of low/limited distributed pharmaceuticals to patients throughout the United States and Puerto Rico. Unlike a traditional or retail pharmacy, Specialty Pharmacy manages and distributes life sustaining medicines to patients...

  • Supervisory Human Resources Specialist

    Found in: beBee S US - 3 weeks ago

    Orlando, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit...

  • Supervisory Human Resources Specialist

    Found in: beBee jobs US - 2 weeks ago

    Orlando, Florida, United States Department Of Homeland Security Full time

    Summary Securing Travel, Protecting People - At the Transportation Security Administration, you will serve in a high-stakes environment to safeguard the American way of life. In cities across the country, you would secure airports, seaports, railroads, highways, and/or public transit systems, thus protecting America's transportation infrastructure and...

  • Infrastructure Cloud Engineer

    2 weeks ago

    Orlando, United States Touchpoints Full time

    Role: AWS Engineer· Experience in working with AWS Cloud services, security, Integration, monitoring, and terraform.· Experience with Infrastructure, Storage, security, and patches.· Experience with Linux, Scripting, and automation.· Bachelor's/Master's in CS or related field or equivalent experience required.