What are the responsibilities and job description for the Cloud Security SME position at Jobs via Dice?
Dice is the leading career destination for tech experts at every stage of their careers. Our client, VDart, Inc., is seeking the following. Apply via Dice today!
Role :- Cloud security SME
Location :- Bellevue, WA
Job Description:
Security SME(L3)
Role :- Cloud security SME
Location :- Bellevue, WA
Job Description:
Security SME(L3)
- The Cloud security SME is responsible for support cloud security initiatives by enhancing IaC security processes and fine-tuning native firewalls (e.g., AWS Security Groups, Azure NSGs, Google Cloud Platform Firewall Rules) to align with best practices and compliance requirements
- IaC Security Scanning & Hardening:
- Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
- Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
- Develop custom policies for IaC scanning tools based on organizational security standards.
- Design and implement native firewall rules across cloud platforms (AWS, Azure, Google Cloud Platform).
- Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
- Conduct regular reviews and audits of firewall configurations and access controls.
- Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
- Support internal and external audits by providing documentation and evidence of controls.
- 7 years of experience in cloud security, network security, or DevSecOps.
- Hands-on experience with Terraform, CloudFormation, or other IaC tools.
- Deep understanding of cloud-native firewall services (AWS, Azure, Google Cloud Platform).
- Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
- Certifications preferred: AWS/Azure/Google Cloud Platform Security Specialty, CISSP, CCSP, Terraform Associate.
- Proficiency in Automation by using Powershell, Bash and Python, etc.
- Hands on experience in network security, specifically managing and operating Azure Firewall.
- Good knowledge of Azure networking concepts (VNets, Subnets, UDRs, Service Endpoints, Private Endpoints, Load Balancers)
- High proficiency in Kusto Query Language (KQL) and practical experience using Azure Data Explorer (ADX) or Azure Log Analytics for network security analysis.
- Advanced skills in Microsoft Excel for data manipulation, pivot tables, charting, and report generation from security log data.
- Excellent analytical and deductive reasoning skills to troubleshoot and solve complex network issues.