Cloud Security Operations Lead

Company: ZoomInfo
Location: Waltham
Posted on: July 18, 2021

Job Description:

ZoomInfo is looking to hire an individual who will join the security team of a rapidly expanding organization with global locations.  We are expanding our cloud security operations.

The successful candidate will be responsible for AWS Cloud security using frameworks and standards such as CSA secure architecture, CIS Cloud Standards and AWS Well Architected Framework.  The candidate will be responsible for reviewing the cloud design and architecture, infrastructure, and security controls.  Coordinating effort and prioritization with DevOps, Infrastructure Engineering team and Engineering along with the SDLC to improve overall security posture.

The candidate will be part of a larger global security team and work closely with individuals from all sectors of security, helping the team and expanding abilities and expertise. These teams include Offensive Security, Cyber SOC, GRC and Security Engineering.

The ideal candidate is an experienced AWS cloud security practitioner who is goal-oriented and strives to exceed expectations, with a proven track record of cloud security.

Responsibilities:

• Guiding and evaluating architecture against AWS Well Architected Framework, identifying gaps and improvements
• Recommend improvements and changes to cloud infrastructure and the applications that are running within it
• Act as the lead for cloud security across the organization
• Understand applications and provide guidance on cloud security implementation and architecture to maximize cloud services
• Recommend tangible improvements and set priorities based on risks
• Work with DevOps and Developers to improve the security culture and areas needing improvement
• Participate in larger security team and enhance development lifecycle for code and infra
• Assist with cloud-based security and compliance tools
• Promote and document cloud security standards and best practices
• Collaborate with internal and external parties to share information to improve processes and security posture
• Communicate with security team leadership
• Keep management informed with precise, accurate information about security posture and events – no surprises.
• Create, document and maintain formal processes to meet certification requirements

Core skills:

• Strong ability to review cloud security design and architecture using the AWS Well Achitectured Framework
• Strong ability to review security of application implementation within cloud platforms
• Knowledge of Landing Zones, Control Tower, VPC, IAM, KMS, zones, Zero Trust
• Security knowledge of Kubernetes and layered cloud security
• Expertise in security tools - Cloud Trail, Cloud Watch, Guard Duty, Security Hub, 
• Knowledge of CSA, CIS standards and other cloud security frameworks in GCP and AWS
• Ability to assess and validate cloud configuration
• Scripting and programming experience as needed
• Able to work independently but also as part of a team
• Flexibility to change direction and manage conflicting demands and emergencies
• Comfortable working in a fast-paced environment
• Highly motivated with the ability to self-start, prioritize, multi-task and work in a team setting
• Excellent verbal and written communication, report writing and presentation skills

Education:

• AWS cloud security or architecture certifications
• CSA or other cloud related certifications.
• Bachelor’s degree in computer security, computer science or relevant experience in cloud security and compliance.
• CISSP, CISA, CISM

Relevant Experience:

• 3-5 years of relevant experience
• Solid knowledge and experience with cloud security and AWS Well Architected Framework
• Knowledge of cloud networking, IAM, KMS, and other related security, continuity and related cloud requirements

Keywords: ZoomInfo, Waltham , Cloud Security Operations Lead, Other , Waltham, Massachusetts