Specialized Knowledge

● Experience with Amazon Web Services cloud environments and its security controls and their corresponding challenges.

● Experience with microservices architectures & distributed Platforms especially in the SaaS businesses

● Experience using Agile software development

● Coding Experience in Scripting & programming languages (such as Terraform, Java, Python, Ruby, etc.)

● Knowledge of information security principles (Confidentiality, Integrity, Availability Authentication & Public Key Infrastructure (PKI), Data Security or Cryptography), and understanding of common exploitation techniques and mitigation.

● Experience implementing, managing, and supporting a vulnerability management program (process and technology).

● Experience and knowledge of implementing a DevSecOps ecosystem and well-known understanding of Dynamic and Static Application Security Testing (DAST & SAST) and infrastructure automation/development utilizing APIs.

● Understanding of the main cybersecurity tools (SIEM, IPS, XDR, etc.) and how they help to protect an application.

● Experience working with Threat modeling (e.g., STRIDE, PASTA, FAIR, Security Cards) and vulnerability frameworks standards (e.g., OWASP, CVSS, CWE) with a good understanding of the Cyber Kill Chain and pervasive threat attack methods and remediation.

● Understanding of global frameworks and standards like NIST, ISO 27001/27002/27017/ 27018, GDPR, etc.

● An Information Security qualiﬁcation or evidence of starting to work towards e.g CSSLP – Certiﬁed Secure Software Lifecycle Professional, CEH - Certified Ethical Hacker, OSCP - Offensive Security Certified Professional , or similar certiﬁcation.

● Thought leadership, critical thinking, strong organizational skills, report writing skills to senior level, ability to prioritize and multitask