AWS Cloud Security engineer

Title: AWS Cloud Security Engineer

Location:Manassas, VA

Duration: 6 months

Below please find the job description for the Cloud Security Engineer at SWIFT located in Manassas, VA. There are 2 openings. Ideal candidates would be Citizens but will consider and H1B. NO OPT.

There will be 3 rounds of interviews. The first is a 30-minute screening with one of the 2 Mangers in Manassas. The second interview will be with the other Manager and his team. The third interview will be with a manager from Belgium. I don t know if the second or third will require the onsite interview. If the candidate is outside the area and will relocate to Manassas day 1, they will consider the candidate but the interviews will take place at an Experis or Manpower office in the candidate s location. If the candidate is local, they will come to the Manassas office for the 2^nd or 3^rd interview.

on site day one and then hybrid with being in the office on Tuesday and Thursday only. Again, at SWIFT so 7.5hrs a day for 37.5hrs a week.

Also, candidates from Maryland will not work. The commute is too much even two days a week. Local candidates should be from Northern VA area please.

Along with the technical skills listed below, they are looking for someone who is a self-starter, has worked in an enterprise environment, and has industry experience in the financial sector. They don t want to see candidates from small companies. The manager will consider people who worked for the federal government and recently laid off but also have experience in the private sector. This manager had gov t and private experience. He worked for Mitre if that helps.

Cloud Security Engineer. Also, there is no development in this role. This person will be responsible for implementing and maintaining security measures to safeguard data, applications, and resources hosted in AWS. Please don t send people who are heavy azure or Google Cloud Platform. They are an AWS environment.

Total IT experience should be a min of 7 years of experience with min of 5 years in this space.

Summary:
Reporting to the Global Security department, this role contributes to the company internal digital transformation in its evolving adoption of Hybrid Hosting Strategy and enhancing its Cloud Security practices. The ideal candidate will have experience defining and implementing security controls for an evolving cloud environment.
Job Description:
As a senior member of the team, you will undertake moderately complex projects ensuring the security and compliance of Swift s cloud infrastructure, compute, and network resources. You will also contribute to the definition of cloud security procedures/controls/policies, within established guidelines; ensuring they are effective and appropriate for SWIFT and its customers, and that they are consistent with the company objectives, company reputation and regulatory requirements.
Job Responsibilities:

• Define and maintain cloud security standards and procedures.
• Manage cloud security findings (vulnerabilities and configurations).
• Operationalize new cloud security features and services designed and developed by the Cloud Platform Security Engineering team.
• Support workloads (application and infrastructure security) in their migration to cloud.
• Support day to day administrative and operational activities for vulnerability and configuration hardening management - assess and triage vulnerabilities and misconfigurations, evaluate security exceptions and risk scenarios.
• Build an understanding of vulnerabilities and misconfigurations management process, related controls, and key roles and responsibilities.
• Create and maintain documents and flow charts to document processes.
• Translate requirements and root cause fixes into Agile user stories or work items for cloud platform/workload Engineers and Developers.
• Engage and work directly with application owners, onboard users to cloud security tools, provide user support, perform user acceptance tests, and troubleshoot cloud tool issues.
• Develop automation to solve repeatable scenarios (eg reporting, reconfigurations, AWS lambda functions) preferably in Python.

What will make you successful?

• 5+ years of relevant work experience.
• Bachelor s degree in computer science, Information Systems or a related field.

Technical Skills:

• Experience with Cloud Security services, preferably AWS (Inspector, Security Hub, Config, Macie, Access Analyzer).
• Understanding of core cloud services (AWS S3, EC2, EKS, VPC, etc.) and container technologies.
• Understanding of DevOps, Infrastructure as Code and IAM Permissions.
• Experience with security vulnerability and configuration scan report analysis.
• Understanding of industry standards and compliance requirements, such as PCI-DSS, CIS.

Soft Skills:

• Analytical Thinking: Ability to analyze security threats and vulnerabilities and develop effective mitigation strategies.
• Problem-Solving: Strong problem-solving skills to address and resolve security issues promptly.
• Communication: Clear communication skills, both verbal and written English, to collaborate with team members, stakeholders, and clients.
• Continuous Learning: Staying updated with the latest security trends, threats, and AWS updates.
• Autonomous, driven, with strong ability to quickly adapt and respond to change.
• Customer oriented and security mindset we continually strive to deliver true customer value.
• Open-minded, solutions oriented, and a true team player.

Thanks