Cloud Security Engineer AXA DCP - Barcelona

Cloud Security Engineer As Cloud Security Engineer your main mission will be to ensure the security and integrity of our applications and infrastructure in the cloud You will be responsible for implementing and supervising security architectures and controls throughout the software development lifecycle collaborating closely with development and operations teams to enforce security standards What Youll Be Doing Act as a trusted advisor for solution architects and development teams providing approval and guidance on secure practices patterns Conduct security assessments audits identifying potential risks in softwareand cloud blueprints proposing improvements Design maintain integrate security into CI/CD pipeline automatingsecurity checks testing processes following principle Shift Left Establish monitor KPIs KRIs related to infrastructureapplication secuirty in AWS context Engage stakeholders especially Technology office Product Office data management team facilitate manage resolution tracking work report progress Utilize variety DevSecOps tools Qualys WAS CheckMarks SCA SAS DAST Checkov cloud services AWS Inspector GuardDuty CloudTrail IAM Config SecurityHub WAS Manager identify assess prioritize manage secuirityvulnerabilities across organizationapplications systems networks automate standardize configurations Foster effective partnerships other teams internal external enhance organizations overall secuirity posture minimize potencial threats idetify threats vulnerabilities control improvements Support stakeholders enable informed decision making Design implement improve secure coding related practices processes standards Collaborate development operations teams implment secuity controls best practices develop deployment proceses Participate delivery securiy audits threat modelling assessments remediation findings Participate AXA DCP Architecture Review Board governances bodiesmeetings related Secuiry activity Perform indepth analysis applicaiton code infrastrucure architecture configuraions ensue compliance Assist investigatin resolution securiy incidents Production Non Produciton environemnts Define implment Infrastructure Code patterns practises Terraform context AWS You will report Chief Secuiry Officer AXA DCP What YOULL Bring We looking someone who has these abilities skills General skills Experience IT securi engineering clould securi engineering or relted roles offensive securi blue team red teem etc Good understanding secui stnadards ISO 27001 GDPR OWASP Top 10 OWASP SAMM OWASP ASVS common web applicaion vulnerabilites secury best practises API Secury Container Secury Clould Secury Experince with securi architecute Clould technology threat modelling Self driven qualitis able work independantly high degree autonomy well part team You fluent English Good communcation verbal written influencing skils ability manag interal externl relations up senior levels managment Will plus: Security Certifications eg CISM CISSP Cloud Certifications eg AWS Solutions Architect level Associate higher AWS Security Specialty Auditing Compliance Certifications eg CISA Experience machine learning tools models Cloudecurity Ideally in AWSCloudSeurity Robust technical understandig Cloudecurity serverless containerized architecturs Experince scalable secure architecturs applications networks deployed cloudevirnments Significant knowlegde implemneting tools processees improve automation vulerabilties risks Experince usin Infrastructure Code engines e g Terraform cloudevirnments Application Develpoment Experince applciaton devevelopment Python Typscript Javascript that main programming languages used by team

---

Descripción del trabajo