About the role
Position: Security Specialist
Hiring: Contract based
Location: Hanoi, Vietnam
Working model: Remote - prefer base in Hanoi
JD & Deliverables: below
Man-day estimation: 38
Payment requirement: when all Deliverables are delivered and met expectations
Tentative start month: July 2024
Scope
Our client is a leading financial institution dedicated to providing innovative banking solutions. As we transition our on-premises infrastructure to the cloud, we seek a skilled Security Specialist to ensure our migration to AWS is secure and compliant with industry standards such as PCI DSS.
The Security Specialist will play a crucial role in our cloud migration project, focusing on securing workloads and ensuring compliance with security standards. The ideal candidate will have extensive experience in AWS, a deep understanding of security practices, and knowledge of regulatory requirements, especially PCI DSS.
Key Responsibilities:
Lead, implement and maintain including Cloud Security Solutions from AWS, next generation firewalls, application firewall/DDoS, container security and the Web Application Firewall (WAF) the security strategy for migrating on-premises workloads to AWS.
* On-Premises Assessment
* Conduct risk assessments and vulnerability analyses to identify potential security threats. * Document all aspects of database management, including design, configuration, maintenance, and troubleshooting.
* Strategy Development
* Work with other Delivery team members to provide security input for Migration Strategy * Collaborate with stakeholders to align migration strategy with business objectives and technical requirements.
* Migration
* Configure, implement, and support security software/systems that will help ensure compliance in AWS cloud environments. Develop and enforce security policies and procedures to ensure compliance with PCI DSS and other relevant standards. * Collaborate with the cloud architecture team to design and implement secure cloud solutions. * Monitor and audit AWS environments to ensure continuous security compliance. * Respond to security incidents and guide mitigation strategies. * Stay updated with the latest security trends, threats, and technologies.
* Testing and Quality Assurance
* Perform sample runs and test data ingestion, processing * Create and execute test cases to validate data accuracy and performance
* Performance Optimization
* Monitor system performance and identify bottlenecks * Optimize Security configurations where needed
* Transition to Client
* Handover all necessary documentation and knowledge to the customer team * Assist with the transition process and provide ongoing support if required * Provide training and support to internal teams on cloud security best practices.
Required Skills and Qualifications:
* Technical Skills
* Solutions Architect - Associate or Professional, AWS Security Speciality * Minimum of 4+ years experience in implementation and operationalizing cloud security solutions/infrastructure * Proven experience in migrating on-premises workloads to AWS. * In-depth knowledge of AWS services and security features. * Strong understanding of PCI DSS and experience ensuring compliance in cloud environments. * Proficiency in conducting security risk assessments and implementing mitigation strategies. * Experience with security tools and technologies such as firewalls, IDS/IPS, SIEM, and encryption. * Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or PCI Professional (PCIP) are highly desirable.
* Preferred Skills:
* Excellent problem-solving skills and the ability to work under pressure. * Knowledge of DevSecOps practices and tools. * Strong communication and interpersonal skills. * Ability to work collaboratively in a team environment.
Project Deliverables
* Migration: Successfully migrates the on-premises database to AWS. * Current State Assessment Report: A detailed comprehensive security strategy and conduct risk assessments for AWS migration. * Migration Strategy Document: A strategic roadmap for migrating on-premise applications to AWS Cloud, including timelines, resource requirements, and cost estimates. * Migration Plan: Detailed migration plans for each application, including AWS service selection, architecture design, and implementation steps. * Incident response plan for the AWS environment. * Risk Assessment and Mitigation Plan: Identification of potential challenges and risks, along with mitigation strategies. * Monitoring and audit reports to ensure continuous compliance and threat mitigation. * Migration Runbooks: Comprehensive runbooks for migration processes, including * Inventory list * pre-migration, migration, and post-migration steps. * Environment setup: Creation and configuration of the AWS environment, including database cluster, backup solution
* Training and Knowledge Transfer Materials: Documentation to support training and knowledge transfer to internal teams and client personnel. * All document compliance with PCI DSS and other relevant security standards.
Originally posted on Himalayas