- Partner with engineering teams to review cloud and compute architecture design changes.
- Establish threat models for cloud and compute paved roads to identify security risks.
- Develop or adopt open-source tools to monitor and harden our cloud Infrastructure, harden our OS, develop security logging pipelines and detect intrusions.
- Apply your expert knowledge of security best practices for AWS and Kubernetes to inform remediations and the team's control roadmap.
- Drive the definition and implementation of security policies and monitor in conformance to the policies.
- Write code for automations that support security requirements like threat detection, incident containment, and network access management.
- Conduct initial incident triage; determine scope, urgency, and potential impact of security incidents; participate in the incident response process.
AWSKubernetesCI/CD+2 more