Professional 2 Cloud Security

Job Description

Cloud Security EngineerDescriptionThe DXC Cloud Security Engineer is responsible for security-related activities involved in operating and maintaining the cloud environments of DXC customers. He/she is responsible for leadership and ownership of Cloud Infrastructure Security and contractual requirements across managed environments.The main goal is to ensure DXC delivers secure and compliant managed services on cloud platforms and to continuously improve our maturity in processes and technology, resulting in best in class security and optimal protection for DXC, our customers, and business partners such as Microsoft, Amazon, and Google from all forms of breaches.The Cloud Security Engineer is an experienced multi-skilled security professional, with hands on experience in cloud environments. He/she is a good team player, who is part of a team responsible for delivering end-to-end managed cloud services to customers. He/she collaborates with security professionals in the regional and worldwide DXC Information Security community to leverage modern solutions and brings cloud expertise to ensure relevance of our security measures in our managed cloud environments.The Cloud Security Engineer is motivated to take strong ownership on actions, to find innovative ways to improve the services agility and efficiency, and to continuously gain more skills. The DXC-managed cloud environments are envisioned to mature into a DevOps delivery model.Responsibilities

• Point of contact and subject matter expert for cloud cybersecurity, risk, and compliance matters in cloud delivery and operations teams
• Define and implement security policies, procedures, and standards in line with the service offerings definition, leveraging wider DXC resources where relevant and defining cloud specific policies as appropriate
• Define controls required for compliance, measure compliance level, define remediations and drive their implementation; maintain compliance documentation
• Ensure audit readiness and drive audits preparation and execution
• Execute security operations tasks, such as access approvals and reviews, security incident response and triage, incident recovery, and remediation activities
• Ensure proper execution of security features provided as part of the services, such as Endpoint Protection and anti-malware, Intrusion detection, Logs analysis, Network Security controls, and patching solutions
• Own Security Incident Management and major security incidents for assigned systems; involve other security teams as needed
• Operate and Maintain security infrastructure, such as identity and access management systems, network access control systems, logging and monitoring systems
• Drive automation in the security area, including developing automation code/scripts
• Contribute to design and validate architecture of tooling and automation solutions from a security perspective, and facilitate well architected reviews with cloud providers (Microsoft, AWS, Google)
• Drive best practices within teams with respect to security standards and guidelines
• Interface with customers and own all security matters for customers, such as answering customer security requests and driving security reviews with customers
• Define security continuous improvement plan and drive its execution

Desired Skills and Qualifications

• Trained or Experienced and Certified in cloud platforms:
  • Microsoft Azure, including automation and security features such as Security Center, Defender, Resource Manager, Key Vault, Azure Active Directory, Monitor, Network Security Groups, Azure Firewall, etc.
  • Amazon Web Services (AWS), including automation and security features such as Security Hub, GuardDuty, Secrets Manager, SSM, CloudFormation, Security Groups/NACLs, CloudWatch/CloudTrail, Well-Architected Framework, etc.
  • Google Cloud Platform
  • Oracle Cloud Infrastructure
  • OpenStack
• Knowledge in security and compliance frameworks and regulations, such as CSA, CIS, ISO, NIST, FedRamp, HIPAA, SOC, PCI DSS
• One or more industry security certifications, such as CISSP, CEH, CCSP, CISM/CISA, CRISC, Security+, GSEC, AWS Certified Security, Azure Security, etc.
• Experienced in code development or scripting languages, such as PowerShell, Bash Shell, Python, .NET, JavaScript, etc.
• Experience with security technologies such as firewalls, monitoring systems, access control systems, anti-malware/endpoint security systems
• Knowledge of identity systems, technologies, and concepts such as Windows/Azure Active Directory, Active Directory Federation Services, OIDC, SAML, SCIM, Okta, Google Identity, PingIdentity, OneLogin, etc.
• Experience with IT systems including Microsoft Windows, Linux operating systems, networking concepts (routing, DNS)
• Fluent English
• Ability to learn and adapt to new frameworks/technologies and quickly integrate with them for automation of service delivery
• DevOps & Agile methodology experience, working with small agile teams with strong ownership and drive
• Degree in Computer Science or Information Technology-related field (or equivalent combination of education and experience)

,

Keyskills :
cloud securitycomputer scienceaccess controlnetwork securityweb servicesagile methodologymanaged servicessecurity incident responseaccess managementnetwork access controlactive directoryoperating systems