Senior Cloud Researcher

Company Description

E.V.A Information Security is looking for a driven and talented individual to join our Cloud Security team.

Our mission is to help our clients grow by leveraging modern technology and creating a safe future. We specialize in performing comprehensive cloud security assessments to ensure our clients' cloud environments are secure, compliant, and resilient against evolving threats.

As a Cloud Security Researcher at E.V.A Information Security, you will:

• Perform in-depth Cloud Security Assessments for our clients, focusing on various cloud platforms.
• Review and evaluate Cloud Account configurations to identify potential security weaknesses.
• Analyze and assess network policies to ensure robust security measures are in place.
• Evaluate Access Control mechanisms to verify compliance with best practices and regulatory requirements.
• Conduct security assessments on containerized environments, including Docker images and Kubernetes clusters.
• Review and audit Infrastructure as Code (IaC) scripts for security vulnerabilities and misconfigurations.
• Manage and monitor cloud assets to ensure comprehensive security coverage.
• Identify and exploit vulnerabilities in live environments to demonstrate real-world attack scenarios.
• Collaborate with clients to provide actionable recommendations and remediation strategies.
• Stay updated with the latest trends and advancements in the cloud security field.

Qualifications

• Proven experience in cloud security, preferably in a consulting or assessment role.
• Strong understanding of cloud platforms such as AWS, Azure, and Google Cloud.
• Proficiency in network security, access control, and identity management.
• Experience with container security, including Docker and Kubernetes.
• Knowledge of Infrastructure as Code (IaC) tools such as Terraform and CloudFormation.
• Ability to identify, analyze, and exploit security vulnerabilities.
• Excellent problem-solving skills and attention to detail.
• Strong written and verbal communication skills.

What Will Give You An Advantage?

• Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), or similar.
• Familiarity with DevSecOps practices and integrating security into CI/CD pipelines.
• Prior experience in a client-facing role with the ability to manage client expectations effectively.