Senior Cloud Engineer

Overview

Senior Cloud Engineer role within The Economist Group's information security program, responsible for designing, implementing, managing, monitoring and upgrading the organisation's cybersecurity measures.

What you'll do

• Support teams to implement, identify and advance security at the Economist.
• Conduct pen tests and risk assessments to prioritise threats and compare mitigation strategies.
• Work with Economist teams, external suppliers and engage with the customer to develop new policies, design processes / procedures and develop technical designs to drive remediation.
• Help to design a secure connected architecture.
• Assist engineering teams in developing secure systems.
• Audit embedded code to identify security vulnerabilities and develop solutions.
• Lead security engineering initiatives and serve as a point of contact.
• Develop the security baselines and documentation as per required.
• Work with monitoring and ensure logs are forwarded to the SIEM capability.
• Assess vulnerabilities and implement solutions and strategies that mitigate those risks.
• Identify, implement, and automate cybersecurity measures and best practices.
• Coordinate incident response across the organisation to respond to threats and security breaches.
• Upgrade security solutions, research new attack vectors and develop threat models.
• Perform security control audits and coordinate with other teams within the organisation to implement the outcomes of security controls.

What you'll need

• Cloud Security and Development (AWS a prerequisite).
• Understanding and experience with CICD and secure CICD best practices (CircleCI).
• Vulnerability Mgmt tooling (code scanning, IaC).
• Security expertise in cryptography and exploit development.
• Strong investigative and analytical problem solving skills.
• Experience with secure architecture design.
• Strong communication skills, both written and spoken.
• Penetration testing experience.
• Proficient in software development, auditing code and features.
• Bachelor's or Master's degree in Computer Science, Cyber Security, or a related field or proof of exceptional skills in related fields, with practical software engineering experience.
• Previous proven experience in Cyber Security.
• In-depth knowledge of security frameworks (NIST, ISO 27001, CIS Controls).

Nice to have

• Experience with SQL and API development best practices.
• AWS specific certifications such as AWS Certified Security - Specialty, or AWS Certified Developer.
• Industry certifications, such as CISSP, CISM, or CISA.

Details

• Location: Gurugram.
• Working arrangement: hybrid, with 3+ days office attendance required.