cyber security.

discussion and tactics forming, building out technical services.
Key Responsibilities:
 Proven experience building security reference architecture for hyperscaler deployments and
hybrid scenarios
 Should have experience in detecting and responding to adversaries
 Experience in presenting Threat Busting Reports and advise accordingly to variety of audiences
from technical audience to C-level executives
 Expertise in hyperscalers (AWS, Azure, GCP) technologies, scripting languages (Python, RoR,
etc.), integrating 3rd party tools, best Practices, and forensics.
 Implementation experience with security solutions such as SIEM, IPS, Anti-DDOS, and WAF.
 Security considerations of hyperscalers, including data breaches, account hijacking, hacking,
third parties, malicious insiders, authentication, APTs, data loss, and DoS attacks.
 Demonstrate capability to enhance and manage independently SIEM, SOC, SOAR, UEBA
platforms.
 Perform security reviews, identify gaps in security posture, and develop a security risk
management plan to develop the application security roadmap for the customers.
 Evaluate security risks and their impact on the Microsoft Cloud platform and its online services.
 knowledge of MITRE
 ATT&CK Frameworks and associated TTP
 Assist clients in selecting and tailoring approaches, methods, and tools to support cloud
adoption for securing existing workloads to a hyperscaler Services such as new customer setup
and service configuration focused on cloud cyber risk mitigation, IAM (e.g., PIM/PAM, MFA, SSO,
Conditional Access), data protection (e.g., DLP, encryption, PKI), network security (e.g., firewalls,
WAF), etc.
Key Requirements:
 Strong ability to design countermeasures to identify security risks. Knowledge of common
security issues, including malware, viruses, ransomware, and host intrusion.
 Strong knowledge of EDR, CASB, SOAR, UEBA platforms, endpoint protection
 Data leakage Security Pro in Administration, design, and policies
Preferred:
 SANS-related certifications such as GIAC Defensible Security Architecture (GDSA) One or more of
the following information security-related qualifications CompTIA Security+, EC Council, SANS,
Offensive Security is preferred.
 Experience with cloud automation and bash scripting, Ansible, Docker, Chef, or Puppet.
 Experience with JSON, Python, XML, and ability to write cloud automation scripts desired.
 Experience with Security Governance solutionsMandate Certifications:
 Certified Ethical Hacker (CEH)
 Certified Vulnerability Manager
 Offensive Security Certified Professional (OSCP) | Offensive Security (OS)
 Cloud Security Certification (Example: MS Certified Azure Security Specialist)