Cloud Security Consultant
This job does not exist anymore.
Try running a new searchor browse our vacancies.
Or fill in the form below to receive job alerts.
| Job Type | Contract |
| Location | Northampton |
| Area | Northamptonshire, England |
| Sector | Cloud & DevOps |
| Salary | £700 - £850 per day |
| Currency | GBP |
| Start Date | 2021/11/30 |
| Job Ref | V-36831 |
| Job Views | 29 |
- Description
- Cloud Security Consultant - Outside IR35
Role: Cloud Security Consultant
Rate: £700 to £850/day (outside IR35)
Location: Northampton (some remote working allowed)
Duration: 6 months
My client, a financial services organisation require a Cloud Security Consultant to be part of a successful and growing Security team. The successful candidate will be required to be in the office as and when needed but will be able to work remotely for the rest of the time.
Key skills/experience;- A firm understanding of the cloud service, security and deployment models for IaaS, PaaS and SaaS service offerings provided by Microsoft Azure
- An understanding of the different delivery responsibility areas per service model is vital
- Experience of large migration projects and working within a relatively small internal team and a third-party Managed Cloud Service Provider
- A firm understanding of the security, configuration and deployment requirements for SaaS offerings (such as O365) is highly desirable.
- Proven ability to design and implement secure cloud architectures and designs that meet clients’ business requirements and incorporate appropriate and sustainable security controls and risk reductions.
- The ability to pick up and learn new technology approaches and make rapid decisions on the best way to use these technology advancements for the betterment of the overall security posture.
- Excellent communication skills as the ability to communicate effectively, constructively, confidently and professionally is key to the success in the role as is the ability to work with IT and Information Security teams and the wider business.
- Keen attention to detail and excellent analytical skills.
- Ability to actively manage workloads to meet business and department requirements.
- Technical knowledge in routing, network security ingress and egress controls, Anti-DDoS, Web Application Firewall (WAF),API Gateways, Cloud Access Security Brokers (CASB), Intrusion Prevention Systems (IPS), Security Information and Event Management (SIEM), anomaly-based detection, secure credential management (including Privileged Access Management), virtualisation, service oriented architecture (SOA) and microservices, Secure DevOps (SecDevOps/DevSecOps), operational practices, containerisation, serverless technologies and data analytics security design.
- Experience with assessing, developing, designing, implementing, operationalizing and documenting a comprehensive set of security technologies and processes within SaaS, IaaS, PaaS, and other cloud environments, such as:
- Secure software development (securing the CI/CD pipeline))
- Infrastructure security (VPC and VNet design, Infrastructure as code, automation))
- Data protection (cryptography & key management, DLP, privacy etc)
- Identity and access management (IAM, IDaaS, PAM etc)
- Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.).
- Experience working with cloud security and governance tools, CASBs and server and network virtualization technologies.
- A working knowledge of financial services and the typical business processes involved together with the threat actors and their relevant tactics, techniques and procedures would be of significant advantage
- An excellent knowledge of Information Security principles and an understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.
- Experience performing threat modelling and design reviews to assess security implications and requirements that accompany the introduction of new technologies. This includes knowledge of CSA, OWASP and other Industry Cloud Security Frameworks.
- Experience with deployment orchestration, automation, and security configuration management
- Preferably CISSP or CISM qualified.
- Relevant Cloud certifications including AZ-500, AZ-304 and / or Certified Cloud Security Professional (CCSP)
