Security Engineer

Requirements:
Mandatory Qualifications:
At least 3 years of experience as a Security Engineer/DevSecOps
Understanding of the Shared Responsibility Model.
In-depth knowledge of securing at least one cloud platform: AWS / Azure / GCP.
Understanding of Landing Zone and Well-Architected Best Practices.
Expertise in IAM (Identity and Access Management), network security (VPC, SG, FW).
Experience in writing cloud policies (e.g., SCP).
Monitoring and logging (CloudTrail, GuardDuty, Security Hub).
Strong understanding of general information security: security principles, encryption, risk management, incident response.
Scripting languages: Python / Bash / PowerShell.
Experience in configuring WAF.
Infrastructure as Code (IaC): Terraform / CloudFormation.

Preferred Qualifications:
Experience in Kubernetes and container security.
Data security (encryption, KMS), securing cloud services (e.g., EC2, Lambda, Containers).
Relevant certifications: AWS Certified Security Specialty, Azure Security Engineer, CCSP (strong advantage).
Familiarity with DevSecOps and code security tools (SAST/DAST).
Experience with CSPM tools (e.g., Wiz, Orca Security, Prisma Cloud).
Familiarity with SIEM tools (Splunk, Sentinel) and investigation capabilities.
Experience securing Microsoft 365 services and Google Workspace.
Understanding of regulations and standards (GDPR, ISO 27001).

Personal Skills:
Hands-on approach.
Strong interpersonal communication skills and teamwork capabilities.
High-level English proficiency.