Description
Cloud Security Application Specialist (AWS/Azure/GCP)
6 months
London
My high profile banking client are currently recruiting for a Cloud Security Application Specialist (AWS/Azure/GCP) to join their team based in London on an initial 6 month contracting position. This will role will give you heavy exposure to GCP. GCP experience will be a distinct advantage.
Application Security Specialist with solid knowledge of public cloud platforms such as AWS or Azure required to join a banking security team in supporting the acquisition of a new Google Cloud Platform in a Digital environment.
GCP experience is a bonus but as long as you have a background in securing AWS, Azure, DevOps and Digital Architecture then that is just as good.
You'll be required to provide assurance activities on existing designs while producing solid HLDs on new solutions.
Joining Group Transformation as a Application Security Specialist, you'll be part of an exciting program delivering a new cloud capability for the bank.
Your responsibility focuses on leading the security design aspects across an enterprise initiative key to the bank, that addresses complex business and security challenges. You'll work with both engineering teams and application developers to ensure security is front and centre of the solutions and services delivered
Skills/Accountabilities:
Knowledge of the enterprise information technology (IT) architectural concepts and patterns (eg, baseline, validated design, and target architectures.)
Knowledge of implementing security solutions using sound architecture principles across a large & complex environment with demanding functional & non-functional requirement
Skill in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications (eg, S/MIME email, SSL traffic)
Skill to identify cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
Skill in developing or recommending analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists.
Skill in identifying alternative analytical interpretations to minimize unanticipated outcomes.
Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
Experience using analysis tools to identify vulnerabilities. (eg Aqua, Nexus, Veracode etc.)
Hands on implementation Scripting and code skills
Representing the security domain in architecture and engineering forums to meet the business needs and deliver business value in a fast and iterative way
Ability to work across several items at the same time with good prioritisation and workload management skills
Excellent presentation skills, both verbally and written in delivering the business outcome and to ensure that their needs are fully represented
Broad range of skills with experience in cyber security, web and mobile technologies, public cloud, and full stack applications
Appreciation of the digital industry; how web applications are hosted; how the Internet is constructed; common threats; challenges with reliance on 3rd parties out of our control
A good understanding of digital/retail banking processes is also desirable but is not essential