Join this scale-up business and own all aspects of security. This is a technical role and will work closely with developers as they work on this market-leading platform. This will have a strong emphasis on DevSecOps and will work in an AWS cloud environment.
This role needs an enabler, a leader, a security specialist who other engineers can come to, someone who is proactive and loves to regularly engage with the engineers.
Day to Day:
This role will drive security maturity across the business with stakeholder engagement and operational perfection and it needs someone who can drive DevSecOps across the business partnering with the engineering teams.
This role will need to develop and deliver consistent automated metrics covering multiple aspects of cloud security; working across promoting common security solutions; supporting teams in risk identification and remediation via security architecture reviews and threat modelling; designing and delivering targeted security training; get across information security for the business and ensure platform implementations conform to company security standards industry best practices.
– creating a roadmap for security compliance
– bring AWS accounts into compliance
– create mechanisms and tooling for secret rotation
– roll out endpoint security to devices
– review access control across AWS and create a systematic process for access control
– help define and create an API gateway to interoperate
– run security training programs for developers
Experience in a security specialist role and have ideally worked in a small to a mid-sized environment that has ultimately been through a scale-up. With at least 5+ years experience in a broader security role alongside skills in DevSecOps, cloud security, malware analysis, network security, incident response, pen testing, threat modelling, SAST, DAST.
A good understanding of best practices across all aspects of security is essential.
The ideal person will have some coding experience, will have delivered technical projects across security and products in a highly technical environment and have a good understanding of cloud computing services.
Are you curious to find out more?
Get in touch I would love to hear from you