What are the responsibilities and job description for the CLOUD SECURITY SME position at Sira Consulting, an Inc 5000 company?
Role :- Cloud security SME
Location :- Bellevue, WA
Security SME(L3)
The Cloud security SME is responsible for support cloud security initiatives by enhancing IaC security processes and fine-tuning native firewalls (e.g., AWS Security Groups, Azure NSGs, GCP Firewall Rules) to align with best practices and compliance requirements
Key Responsibilities:
IaC Security Scanning & Hardening:
Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
Develop custom policies for IaC scanning tools based on organizational security standards.
Firewall Implementation & Tuning:
Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
Conduct regular reviews and audits of firewall configurations and access controls.
Risk Management & Compliance:
Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
Support internal and external audits by providing documentation and evidence of controls.
Requirements:
- 7 years of experience in cloud security, network security, or DevSecOps.
- Hands-on experience with Terraform, CloudFormation, or other IaC tools.
- Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
- Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
- Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
- Proficiency in Automation by using Powershell, Bash and Python, etc.
- Hands on experience in network security, specifically managing and operating Azure Firewall.
- Good knowledge of Azure networking concepts (VNets, Subnets, UDRs, Service Endpoints, Private Endpoints, Load Balancers)
- High proficiency in Kusto Query Language (KQL) and practical experience using Azure Data Explorer (ADX) or Azure Log Analytics for network security analysis.
- Advanced skills in Microsoft Excel for data manipulation, pivot tables, charting, and report generation from security log data.
Excellent analytical and deductive reasoning skills to troubleshoot and solve complex network issues