Cloud Security Engineer

The senior cloud security engineer is responsible for developing and maintaining Greenlight Planet’s security architecture around software that helps process nearly 10 million payments a month for Greenlight’s Pay as you go products. This role reports to AVP, Global Analytics and Technology.

Key responsibilities for the role:
• Ongoing analysis of security o Conduct regular vulnerability Assessment & Penetration Testing with manual and automated methods and communicate report to the Devops and data engineering teams with remediation actions
o Establishes metrics to track coverage and effectiveness of security processes and publishes periodic reports
o Set up automated processes to monitor systems for unusual activities (e.g unauthorized access, modification, duplication or destruction of information)
o Run diagnostics on information changes to check for undetected breaches
• Reviewing and authorizing access
o Security architecture reviews of code commits and infrastructure changes
o Developing systems and processes to identify and grant access to users and APIs
• Tools & Documentation:
o Establishing ISMS policies and implement tools to achieve group strategy for ISO 27001
o Manage security tools integration into CI/CD pipeline, deployment of any other tools to improve security

The ideal candidate has:
• 3-5 years of experience in network Security, Endpoint security, and Cloud infrastructure
• Strong knowledge of cloud (IAAS,PAAS and SAAS) with AWS
• Knowledge of layer 4-7 protocols and best practices for hardening
• Experience with certificate managers and key management systems like Vault and AWS KMS
• Experience in ethical hacking, threat modeling, log analysis, intrusion detection/prevention protocols
• One or more of the following certifications - CISSP, CRISC, CISA, OSCP
• Experience with SIEM, logging and monitoring frameworks like Elastic, Splunk, Graylog, Qradar etc.
• Expertise in performing Threat Modeling, security requirement gathering and security architecture design to aid software and product development teams

Good to have:
• Experience of designing and auditing applications based on PCI-DSS, GDPR and SOC, CIS global standards.
• Experience with Terraform (Infrastructure as Code), Qualys & Snyk (Code Scanners), Aquasec & PrismaCloud (Container Scanners).

If you are a committed, passionate professional who wants to become part of a compelling social venture that is solving the energy problem in a big way, we want to hear from you. Greenlight Planet offers a competitive salary, a fun, supportive work environment and opportunities for continued professional growth within a fast-moving global enterprise. Instead of measuring time spent on a task, we measure and reward results delivered.

We seek to foster our team's diversity, in terms of culture and life experiences. We especially encourage women, sexual and gender minorities, people with disabilities, and members of other underrepresented groups to apply. We do not discriminate on the basis of race, color, religion, sex, marital status, sexual orientation, national origin, HIV/AIDS status, or disability.