Cloud Security Engineer

EcoVadis

850

Warsaw, Poland

Posted on: 2021-12-06

Category: sustainability

Apply now

Please let EcoVadis know you found this job on Work in Green. This will help us grow!

Expired

Employment type:

Full time

Experience required:

Intermediate

Salary

Salary not provided

About the company:

EcoVadis is the world’s most trusted provider of business sustainability ratings, intelligence and collaborative performance improvement tools for global supply chains. Backed by a powerful technology platform and a global team of domain experts, EcoVadis’ easy-to-use and actionable sustainability scorecards provide detailed insight into environmental, social and ethical risks across 200+ purchasing categories and 160+ countries.

Industry leaders such as Verizon, Johnson & Johnson, Subway, Coca Cola European Partners, Salesforce, Renault-Nissan, ING Bank, and Nokia are among the more than 75,000+ businesses on the EcoVadis network, all working with a single methodology to evaluate, collaborate and improve sustainability performance in order to protect their brands, foster transparency and innovation, and accelerate growth.

EcoVadis is driven by a diverse team of over 700 talented professionals from 50+ nationalities, based in our worldwide offices - Paris, Mauritius, New York, Warsaw, Tunis, Hong Kong, London, Toronto, Barcelona, Tokyo.

In this role, you main focus will be to conduct security architecture review of organization and cloud service deployments as well as software defined network technologies and architectures (microservices) supporting cloud and emerging technologies and prepare recommendations for hardening.

In addition, you will:

Contribute to all levels of the architecture from a security perspective,
Serve as a security expert during the whole development process and mitigate security vulnerabilities,
Monitor and identify environments’ security issues; formulate appropriate resolutions,
Provide clear remediation guidelines for engineering teams and business owners for security aspects,
Help the engineering teams fix security related issues (infrastructure, network, application), address issues where appropriate,
Monitor and evaluate security controls throughout the business,
Prepare security hardening guidelines for cloud services,
Security research on the latest best security practices, trends, threats and vulnerabilities, and technology frameworks,
Documenting and disseminating security guidelines for common security issues, remediation guidance, and security technology baselines,
Develop tools and exploits to support application security review and penetration testing,
Collaborating with DevOps team to implement security measures,
Working with the Security Manager to plan, coordinate, and implement security enhancements to safeguard service access, data repositories & other digital assets,
Assist with other organization security projects and tasks as required.

Qualifications

5+ years of experience in a similar role in a relevant software or internet service industry,
Minimum Bachelor of Science degree in Computer Science, Computer Engineering, or a related technical field,
Strong experience in designing and implementing secure systems on Microsoft Azure,
Strong experience in securing microservices,
Strong experience in authentication and authorization schemas (SSO), securing API,
Strong experience in both vulnerability research and penetration testing,
Working knowledge of network security assessment and architecture,
Expert knowledge of tools and automation techniques for finding security flaws in cloud services and environments,
Managing and prioritizing multiple tasks in accordance with high level objectives,
Knowledge of relevant business or compliance drivers that obviate the need for security tooling or processes,
Strong foundation in and in-depth technical knowledge of security engineering, computer and network security, authentication and security protocols and applied cryptography,
Experience with scripting languages (Bash, PowerShell, etc.),
Able to drive consensus amongst technically strong but differing groups,
Profound love of breaking things in order to make them stronger,
Open to work in an international, multilingual environment,
Proficient in English.