Cloud Security Engineer & GRC at DAI

DAINigeria Cloud Computing

Full Time

DAI works on the frontlines of international development. Transforming ideas into action-action into impact. We are committed to shaping a more livable world.We tackle fundamental social and economic development problems caused by inefficient markets, ineffective governance, and instability. We work with a wide range of clients, including national and local governments, bilateral and multilateral donors, private corporations, and philanthropies. Since 1970, we have worked in more than 150 countries-delivering results across the spectrum of international development contexts, from stable societies and high-growth economies to challenging environments racked by political or military conflict.

We are seeking a Security Engineer to join our fast-paced team building the latest innovative and disruptive technology solution.
We are looking for an experienced Cloud Security Engineer to join our team. In this role, you will be responsible for securing our AWS cloud infrastructure and ensuring compliance with security standards and regulations.
The role requires hands-on technical experience and a can-do approach toward environment automation/management and continuous improvement.
We want people who can solve challenging problems, make a real impact, and build something big.
If you have the right skills and are passionate about technology, you should join us. As a Cloud Security Engineer and GRC, you will work independently to build next-generation applications that are efficient & reusable.

Key Responsibilities / Duties:

Design and implement security controls, policies, and procedures for the AWS environment
Perform risk assessments of AWS workloads and identify potential vulnerabilities
Monitor AWS infrastructure for security threats, anomalies, and incidents
Investigate and remediate security issues identified in the AWS environment
Conduct security audits and ensure continuous compliance with regulations such as PCI DSS, NDPR, ISO 27001, etc.
Develop and maintain GRC policies, procedures, technical controls, and documentation
Provide guidance and thought leadership on cloud security best practices
Collaborate with development teams to ensure security is built into AWS applications
Stay up-to-date on AWS security features, vulnerabilities, and threat intelligence

Requirements:

5+ years of experience in cloud security, with expertise in AWS security
In-depth knowledge of AWS security services like IAM, VPC, CloudTrail, GuardDuty, Site2Site VPN etc.
Hands-on experience with vulnerability assessment, penetration testing, and security monitoring
Experience with compliance regulations such as PCI DSS, NDPR, ISO 27001, etc.
Scripting skills for automation of AWS security tasks
Promote DevSecOps culture through security automation, threat modeling, and training
Develop and implement security testing pipelines for CI/CD
Strong understanding of web application and API security principles
Ability to communicate complex security topics to both technical and non-technical audiences
BS degree in Computer Science, Information Security or related field
Comfortable working remotely

Qualifications and Additional Desired Skills:

Bachelor’s or Master’s Degree in Computer Science or other similar fields from a premier institute
Familiarity with at least one versioning tools: Synk, Gitlab, SVN
Being able to work autonomously and aptitude to learn new technologies independently
Ability to work in a fast-paced environment
Excellent communication skills to collaborate with stakeholders in engineering, data science, and product team
AWS Security certifications such as AWS Certified Security – Specialty
Certifications like CISSP, CISA, CEH, OSCP, GWAPT would be a bonus

Benefits