|
Skill
|
Required /Desired
|
Amount
|
Actual Years of Experience
|
|
Enterprise Cloud Experience
|
Required
|
8
|
|
|
Enterprise Cloud Security Experience
|
Required
|
5
|
|
|
Candidate must be highly experienced as a cloud security professional with strong hands-on expertise in cloud infrastructure and cloud engineering
|
Required
|
|
|
|
Candidatte must be highly experienced in cybersecurity, networking, identity, security operations, and have a deep cloud engineering competency
|
Required
|
|
|
|
Candidate must have in-depth experience moving between strategic architecture and hands-on engineering and identifying security risks
|
Required
|
|
|
|
Candidate must have in-depth experience designing practical solutions, implementing controls, and working with infrastructure teams
|
Required
|
|
|
|
Candidate musth have in-depth experience working with application teams to continuously improve the organization's cloud security posture
|
Required
|
|
|
|
Candidate must have experience setting up Network Security Groups (NSGs), resource manager and management groups, monitor and log analytics,
|
Required
|
|
|
|
Candidate must have experience setting up Azure Firewall, Azure WAF, Azure Monitor, Application Gateways, virtual networks and network segmentation.
|
Required
|
|
|
|
Candidate must have experiences in: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitoring, IOC analysis
|
Required
|
|
|
|
Candidate must have experiences coordinating during cyber incidents
|
Required
|
|
|
|
Candidate must have experience in vulnerability management, remediation tracking, vulnerability scanning tools (e.g. Nessus, Tenable, Defender)
|
Required
|
|
|
|
Candidate must have experience securing enterprise cloud environments and implementing security controls in production environments
|
Required
|
|
|
|
Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel, CNAPP),
|
Required
|
|
|
|
Candidate must have experience with log management, security analytics, SOC integration, Threat detection, and Threat hunting
|
Required
|
|
|
|
Candidate must also have hands on expertise validating indexer parsers, leveraging Splunk Query Language for monitoring and data analysis.
|
Required
|
|
|
|
Candidate must have experience collaborating with the security governance team and application leads to implement enterprise log management standards.
|
Required
|
|
|
|
Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
|
Required
|
|
|
|
Candidate must have experience in cloud vulnerability management, remediation tracking, and risk assessment and prioritization
|
Required
|
|
|
|
Candidate must have experience in cloud risk assessment and prioritization, attack surface management, and Cloud Security Posture Management (VSPM)
|
Required
|
|
|
|
Candidate must have experience in Cloud Workload Protection (CWPP) and Cloud-Native Application Protection Platform (CNAPP)
|
Required
|
|
|
|
Candidate must have experience developing Azure Policy to enforce standardization and compliance with enterprise requirements
|
Required
|
|
|
|
Candidate must have experience creating Azure Automation runbooks to support incident response workflows.
|
Required
|
|
|
|
Candidate must have experience with Identity and access management (IAM), Role-based Access control (RBAC), and Privileged Access Management (PAM)
|
Required
|
|
|
|
Candidate must have experience with Least-privilege access and multi-factor authentication
|
Required
|
|
|
|
Candidate must have experience working in highly regulated environments with large government agencies or similar regulatory environments.
|
Required
|
|
|
|
Candidate must have ability to communicate technical issues to technical, non-techical, and executive audiences.
|
Required
|
|
|
|
Candidate must have ability mentor junior engineers.
|
Required
|
|
|
|
Required: Azure Security Engineer Associate, Security+, Certified Cloud Security Professional certifications
|
Required
|
|
|
|
Preferred: CCSP, Designing Microsoft Azure Infrastructure (AZ-305)
|
Desired
|
|
|
