Cloud Security Engineer at Moniepoint Inc.

Job Purpose

• We are looking to hire a Cloud Security Engineer to work with the Chief Information Security Officer to maintain a secure and reliable cloud environment safeguarding the information assets of Moniepoint and also utilizing information and related technology to achieve the business objectives.

Responsibilities

• Creating cloud-based infrastructure and programs including implementing identity and access management and configuring cloud environments securely.
• Performing penetration testing and threat simulations to identify potential risks.
• Managing cryptography and encryption in the cloud.
• Monitoring for and responding to incidents in the cloud environment.
• Keeping cloud infrastructure current, making recommendations, and continually improving cloud security technologies.
• Analyzing, designing, and developing programs, shell scripts, tests, and infrastructure automation capabilities.
• Working with analysts, engineers, and data scientists across the organization to continually improve cyber resilience.
• Work collaboratively with wider Information Security team. This would include working with: The Incident Response team, assisting with incidents; and with the Security Consultants to provide additional technical knowledge.
• Take part in post incident reviews and propose engineering resolution to improve results in any future recurrence.
• Recognise the telemetry for security products will increasingly be curated in the cloud and be prepared to develop API endpoints and connections to collect and collate this knowledge.

Requirements

• Candidates should possess a Degree in Computer Science, Management Information Systems, Computer Engineering or related degree .
• Relevant cloud certifications including: Certificate of Cloud Security Knowledge (CCSK), Certified Cloud Security Professional (CCSP) ,AWS Certified Solutions Architect – Associate, Microsoft Certified: Azure Solutions Architect Expert, Google Cloud Engineer Associate.
• Minimum of 2 years’ experience in information security/technology risk reviews across enterprise operating systems, databases, banking applications and networks.
• Experience with designing, implementing secure and highly available infrastructure, services, data storage in hybrid-cloud or commercial cloud environments such as AWS, Azure or GCP.
• Hands of experience with a least 1 of the main cloud vendors (Amazon Web Services, Azure, Google Cloud Platform).
• Experience of Cloud Security Tools.
• Excellent knowledge of Information Security principles and an understanding of the Cyber Kill Chain, MITRE ATT& CK and other information security defence and intelligence frameworks.
• Experience in scripting languages like Python, Ruby-on-Rails, Javascript, building and consuming Application Program Interfaces (APIs)/micro-services.
• Ability to work with little supervision and meet strict deadlines.
• Must be results-oriented, setting high standards, and intent on making things happen.
• Takes the initiative within given parameters with freedom to act.