Information Security Technical Engineer / Architect

SAI360 – Who We Are

SAI360 is giving companies a new perspective on risk management. By integrating Governance, Risk, Compliance (GRC) software and Ethics &Compliance Learning resources, SAI360 can broaden your risk horizon and increase your ability to identify, manage, and mitigate risk. See risk from every angle. Visit www.sai360.com.

Job scope and Accountabilities:

Responsible for assessing and providing advice on the secure operations of both the customer cloud environment and the corporate IT infrastructure, platforms, and software, installation, maintenance, and improvement of both the cloud and corporate computing environments.

Be part of the development of new designs and security strategies across our cloud-based applications, including infrastructure, platform, and SaaS.

Key Responsibilities:

• Creating cloud-based infrastructure and programs including implementing identity and access management and configuring cloud environments securely.
• Managing cloud security posture management, identifying, and prioritizing security risks and working with stakeholders on remediation plans.
• Performing penetration testing and threat simulations to identify potential risks.
• Monitor and develop testing strategies together with software development teams, including the review and implementation of DAST, SAST and regression test software as part of the build cycle.
• Managing and reviewing cryptography and encryption.
• Monitoring for and responding to security incidents.
• Keeping infrastructure current, making recommendations, and continually improving security technologies.
• Developing mechanisms to align with the adoption and usage of current and emerging technologies.
• Analyzing, designing, developing, and reviewing programs, shell scripts, tests, and infrastructure automation capabilities.
• Working with analysts, engineers, developers, and architects across the organization to review and address risks and continually improve cyber resilience.
• Carry out internal audits to evaluate business risks on both a technical and operational level.

Qualification and Experienced required:

• Extensive experience of hands-on technical expertise in technology automation, implementation, integration, and/or deployment.
• Extensive experience with compliance and common industry security standards.
• Understanding architectural implications of meeting any industry standards such as ISO 27001, HIPAA, and NIST frameworks, and GDPR and other privacy regulation are a plus.
• Understanding of Cloud Security Concepts (SaaS, PaaS, IaaS), Network and Application Security and /or Data protection.
• Knowledge of Terraform, Ansible, PowerShell, python scripting languages is preferred.
• Knowledge of application and cloud security industry leading standards.
• CISSP, CISM or equivalent certifications.

Benefits:

• Remote work opportunities and flexible working hours
• Private health and accident insurance
• Extra vacation days
• Professional growth opportunities and the opportunity to work with the latest tech
• A Sports Allowance
• Performance-based annual bonus and salary review.

Salary for this position starts from €45'000 gross/ year. Keep in mind that we are open to discuss a different salary based on your skills and competences.