Redaptive Cloud Security Specialist Threat Modeling

Job description

<p></p><p>Redaptive is seeking a highly skilled Cloud Security Specialist to join our team in Pune.

This critical position offers an exceptional opportunity to shape and lead Redaptive's cloud security strategy while working with cutting-edge technologies in a dynamic, mission-driven organization.

</p><p><br/></p><p>The ideal candidate will combine technical expertise with a collaborative approach to embed security throughout our cloud infrastructure and development and Duties :</b></p><br/><p><b>AWS Security Architecture & Strategy :</b></p><p><br/></p><p>- Design and implement comprehensive security architectures for Redaptive's AWS cloud environments<br/><br/></p><p>- Develop cloud security roadmaps aligned with business objectives and compliance requirements<br/><br/></p><p>- Establish security standards, policies, and procedures for AWS deployments<br/><br/></p><p>- Evaluate and recommend security enhancements to strengthen the cloud security posture<br/><br/></p><p>- Lead security aspects of cloud migration initiatives and new AWS service adoptions<br/><br/></p><p>- Implement zero-trust security principles in cloud architecture designs<br/><br/></p><p>- Provide expert guidance on AWS security best practices to stakeholders across the organization<br/><br/></p><p>- Establish metrics to measure the effectiveness of cloud security controls</p><br/><p><b>Security Automation & CI/CD Integration :</b></p><p><br/></p><p>- Develop and maintain security as code implementations for AWS environments<br/><br/></p><p>- Integrate security controls and checks into CI/CD pipelines<br/><br/></p><p>- Automate security scanning, compliance verification, and remediation processes<br/><br/></p><p>- Implement infrastructure as code (IaC) security practices for AWS CloudFormation and Terraform<br/><br/></p><p>- Create automated security testing frameworks for cloud resources<br/><br/></p><p>- Develop custom security rules and policies for automated enforcement<br/><br/></p><p>- Collaborate with DevOps teams to ensure security requirements are met throughout the development lifecycle<br/><br/></p><p>- Design and implement automated incident response playbooks for cloud security events</p><br/><p><b>Cloud Security Monitoring & Operations :</b></p><p><br/></p><p>- Configure and manage cloud security monitoring solutions including AWS Security Hub, GuardDuty, and CloudTrail<br/><br/></p><p>- Implement and tune cloud-native SIEM solutions for comprehensive security visibility<br/><br/></p><p>- Develop and maintain cloud security dashboards and reporting mechanisms<br/><br/></p><p>- Perform advanced cloud security investigations and threat hunting<br/><br/></p><p>- Respond to and remediate cloud security incidents<br/><br/></p><p>- Conduct cloud security posture assessments and vulnerability management<br/><br/></p><p>- Implement and manage cloud security logging and audit mechanisms<br/><br/></p><p>- Develop and maintain cloud security incident response procedures</p><br/><p><b>Identity & Access Management :</b></p><p><br/></p><p>- Design and implement AWS IAM policies, roles, and permission boundaries following least privilege principles<br/><br/></p><p>- Develop automated solutions for identity lifecycle management in cloud environments<br/><br/></p><p>- Implement and manage privileged access management for AWS resources<br/><br/></p><p>- Configure and maintain AWS Single Sign-On and federation with corporate identity providers<br/><br/></p><p>- Design and implement secure service-to-service authentication mechanisms<br/><br/></p><p>- Conduct regular access reviews and implement automated compliance checks<br/><br/></p><p>- Develop and maintain IAM security frameworks and governance processes<br/><br/></p><p>- Implement automated detection and remediation of IAM policy violations</p><br/><p><b>Compliance & Risk Management :</b></p><p><br/></p><p>- Ensure AWS environments meet relevant regulatory requirements and industry standards (e.g., SOC 2, ISO 27001, NIST)<br/><br/></p><p>- Develop and implement cloud security compliance frameworks and controls<br/><br/></p><p>- Perform cloud security risk assessments and develop risk treatment plans<br/><br/></p><p>- Lead cloud-focused security aspects of compliance audits and assessments<br/><br/></p><p>- Implement technical controls to meet compliance requirements<br/><br/></p><p>- Develop and maintain cloud security documentation for compliance purposes<br/><br/></p><p>- Design and implement data protection controls for regulated information in the cloud<br/><br/></p><p>- Partner with legal and compliance teams on regulatory and contractual security requirements</p><br/><p><b>DevSecOps Collaboration :</b></p><p><br/></p><p>- Work closely with DevOps teams to implement security throughout the cloud deployment lifecycle<br/><br/></p><p>- Provide guidance on secure cloud architecture and configuration<br/><br/></p><p>- Develop security requirements and acceptance criteria for cloud deployments<br/><br/></p><p>- Review infrastructure as code for security considerations<br/><br/></p><p>- Participate in sprint planning and retrospectives to integrate security into agile processes<br/><br/></p><p>- Conduct security knowledge transfer sessions for development and operations teams<br/><br/></p><p>- Collaborate on resolving security findings and implementing remediation<br/><br/></p><p>- Champion a DevSecOps culture across the organization</p><br/><p><b>Required Abilities and Skills :</b></p><p><br/></p><p>- Advanced expertise with AWS security services including GuardDuty, Security Hub, IAM, KMS, and CloudTrail<br/><br/></p><p>- Strong understanding of cloud security frameworks (AWS Well-Architected Framework, NIST CSF, CSA CCM)<br/><br/></p><p>- Hands-on experience implementing security controls in CI/CD pipelines<br/><br/></p><p>- Expert knowledge of infrastructure as code (IaC) security for AWS CloudFormation and/or Terraform<br/><br/></p><p>- Experience with cloud security posture management (CSPM) tools and processes<br/><br/></p><p>- Strong understanding of identity and access management principles in cloud environments<br/><br/></p><p>- Experience with automated security testing and continuous security validation<br/><br/></p><p>- Proficiency in scripting and programming (Python, Bash, etc.) for security automation<br/><br/></p><p>- Excellent understanding of network security, containerization security, and serverless security<br/><br/></p><p>- In-depth knowledge of DevSecOps principles and practices<br/><br/></p><p>- Excellent written and verbal communication skills</p><br/><p><b>Preferred Abilities and Skills :</b></p><p><br/></p><p>- Experience with multi-cloud security strategies and implementations<br/><br/></p><p>- Knowledge of regulatory compliance requirements relevant to cloud environments<br/><br/></p><p>- Experience with container security (Docker, Kubernetes, ECS, EKS)<br/><br/></p><p>- Background in implementing Zero Trust architecture in AWS environments<br/><br/></p><p>- Experience with AWS automated incident response and remediation<br/><br/></p><p>- Knowledge of cloud-native security tools and platforms<br/><br/></p><p>- Experience with Hashicorp Vault or similar secrets management solutions<br/><br/></p><p>- Background in implementing security for data lakes and analytics platforms<br/><br/></p><p>- Experience with cloud workload protection platforms (CWPP)<br/><br/></p><p>- Knowledge of serverless security best practices<br/><br/></p><p>- Experience with cloud security in the energy efficiency or sustainability industries<br/><br/></p><p>- Background in threat modeling for cloud architectures<br/><br/></p><p>- Experience working with global teams and offshore development models</p><br/><p><b>Education requirements :</b></p><p><br/></p><p>- Bachelor's degree in Cybersecurity, Computer Science, or related field; Master's degree preferred<br/><br/></p><p>- Minimum of 7+ years of experience in cybersecurity, with at least 5 years focused on cloud security<br/><br/></p><p>- Relevant security certifications (AWS Certified Security - Specialty, CCSP, CISSP, or equivalent)</p><br/><p><b>The Perks !</b></p><p><br/></p><p>- Equity plan participation<br/><br/></p><p>- Medical and Personal Accident Insurance<br/><br/></p><p>- Support on Hybrid working Equipment & Relocation<br/><br/></p><p>- Flexible Time Off<br/><br/></p><p>- Continuous Learning<br/><br/></p><p>- Annual bonus</p><br/><p></p> (ref:hirist.tech)

Required Skill Profession

Computer Occupations