Tier 2 Information Security Specialist – AWS Cloud Environment (25977)

Who We Are:

Yael Group is a leading group of companies in the Israeli market, providing advanced technological solutions across a wide range of domains to organizations in all sectors.

Job Description:

• Operating and maintaining all of the organization's information security systems – onboarding new systems, performing hardening, and conducting resilience tests.
• Ongoing management of all information security systems – log reviews, monitoring, configurations, and communications.
• Maintaining information security systems – identifying and troubleshooting issues, and tracking them through resolution.
• Adapting and configuring systems according to the organization's existing requirements and guidelines.
• Participating in projects from the planning stage through implementation.
• Initiating solutions to maximize the capabilities of existing systems.
• Writing technical documentation as required and in accordance with guidelines.
• Working with external parties to resolve issues and provide support and installations.
• On-site visits to resolve issues as needed.
• Performing activities required to prevent, detect, and identify anomalies in the field of information security.
• Hardening cloud services and infrastructure: encryption, access controls, external exposure, and secure baseline configuration for new and existing accounts.
• Implementing the identity and permissions model: federation, human access, system permissions and automation, reducing privilege escalation paths, and eliminating long-lived credentials.
• Implementing security controls and infrastructure as code, including controlled organization-wide deployment, drift detection, and validation prior to broad rollout.
• Implementing the logging and visibility layer.
• Integrating and evaluating cloud security products within the environment.
• Preparing technical documentation and operating procedures for implemented controls.
• Mobility between the various sites as needed.

Job Requirements:

• At least 3 years of experience in the field of information security.
• Proven knowledge of information security and security systems, data communications, and Windows/Linux operating systems.
• At least 2 years of hands-on experience in information security within organizations with 1,000 or more users.
• 2 years of experience in DevOps / Cloud Security / Cloud Infrastructure Engineering.
• Proven hands-on experience in a multi-account public cloud environment – AWS.
• 2 years of experience with cloud security architecture and native security services such as IAM, KMS, GuardDuty, Security Hub, WAF, CloudTrail, or equivalent.
• 2 years of experience with IaC – Terraform or equivalent – at the writing and maintenance level.
• 2 years of experience with cloud permissions models: identity and resource policies, cross-account trust, permission boundaries, and privilege escalation paths.
• 2 years of experience with cloud migration – migrating On-Premises infrastructure to AWS.
• 2 years of experience implementing cloud security controls in at least 3 of the following areas: identities and permissions, secrets and key management, service hardening, organizational policies, visibility and log collection, response automation.
• 2 years of experience with cloud networks and communication protocols.
• 2 years of experience in cloud networking: VPC, Security Groups, routing, and external exposure.
• In-depth understanding of data communications, with troubleshooting and problem-solving capabilities – 7-layer model, routing protocols, subnetting, routing, and routing priorities.
• High-level proficiency in English: speaking, reading, and writing.
• 3 years of experience establishing or expanding a Landing Zone / multi-account cloud environment – an advantage.
• 3 years of hands-on experience implementing and operating SASE Firewall, NAC, and IPSEC VPN – an advantage.
• 3 years of experience writing scripts and developing automation using Python, Bash, or similar tools – an advantage.
• Security Specialty / Professional Architect Solution / DevOps Specialty certification – an advantage.