You will operate security-log analysis, monitoring, and anomaly detection, including automation of repetitive analysis. You will automate vulnerability checks, SBOM management, cloud security configuration, audit evidence collection, security approvals, document security, and account lifecycle management. You will establish secure-coding guidance, train developers, and respond to security incidents and external reporting requirements.
Responsibilities
- Operate security-log analysis, monitoring, anomaly detection, and repetitive-analysis automation
- Perform vulnerability assessments and manage SBOMs in CI/CD pipelines
- Manage and automate security configuration checks for SaaS, IaaS, and PaaS environments
- Perform audits and inspections and automate reporting and information-security certification evidence collection
- Build and automate security approval and document-security processes
- Automate account lifecycle management and onboarding and offboarding provisioning
- Establish secure-coding guidance and train development organizations
- Respond to security incidents and external reporting requirements
Requirements
- Four to eight years of information-security experience
- Practical scripting and automation experience using Python, Shell, or similar tools
- DevOps or DevSecOps experience integrating security controls into CI/CD pipelines
- Practical cloud-security configuration and assessment experience with AWS or GCP
- Experience responding to internal or external audits, certification assessments, or customer security reviews
- Application security or software development experience
- Experience automating security work with LLMs or workflow automation tools
- Experience securing Kubernetes or infrastructure-as-code environments such as Terraform
- Experience operating WAF, IPS, DLP, NAC, or SIEM solutions
- Experience reviewing and responding to GDPR or APPI