Position’s Contributions to Work Group :

• Expert level proficiency with Prisma Cloud and be capable of deploying the tool in a variety of environments, including:
• ECR/ECS/Fargate
• OpenShift
• Docker/Kubernetes
• Azure DevOps Pipelines
• Work with security teams in key business units to remediate vulnerabilities and compliance findings
• Partner with development teams to secure CI/CD pipelines
• Develop deployment architecture for agent-based scanning of image repositories
• Assist with the development of baseline security controls and translate that into Prisma policies
• Mentor junior team members on Prisma Cloud and cloud security best practices
• Tracking open security issues and escalating as necessary to ensure remediation

Typical task breakdown:

• Expert level proficiency with Prisma Cloud and be capable of deploying the tool in a variety of environments, including:
• ECR/ECS/Fargate
• OpenShift
• Docker/Kubernetes
• Azure DevOps Pipelines
• Work with security teams in key business units to remediate vulnerabilities and compliance findings
• Partner with development teams to secure CI/CD pipelines
• Develop deployment architecture for agent-based scanning of image repositories
• Assist with the development of baseline security controls and translate that into Prisma policies
• Mentor junior team members on Prisma Cloud and cloud security best practices
• Tracking open security issues and escalating as necessary to ensure remediation

Work environment :

• Hybrid work model (3x in office)

Education & Experience Required:

• Bachelors Degree in a related field preferred.
• Advanced certification in Cloud Security such as AWS Security Specialty, SANS GCLD, or AZ-500 preferred.
• Minimum of 5 years exp in Cloud or Cloud security.

Technical Skills

(Required)

• Experience securing CloudFormation/Terraform IaC
• Proficiency in measuring and securing IaaS, PaaS, and SaaS environments in AWS and Azure
• Experience with Python, YAML, JSON
• Understanding of the AWS Well-Architected Framework and most CSP-native security tools such as Service Control Policies, CloudWatch, Control Tower, or Azure Security Center

(Desired)

• Ability to move fast in an environment with ambiguity at times, and with competing priorities and deadlines.
• Extensive experience deploying security best-practices in public cloud environments
• Performs information gathering and research on key elements of IT security policies.
• Assists senior colleagues in identifying and analyzing critical issues in IT security policies.
• Executes IT security policies and standards within a specific region in organization.
• Conducts performance reviews on implementation of IT security policies.
• Generates status reports for senior management to ensure the implementation of IT security policies.