Note! Apply link will take you to an external website.
Senior Cloud Security Engineering Manager
HeartFlow, Colombia
Experience
1 Year
Salary
Job Type
Job Shift
Job Category
Traveling
No
Career Level
Telecommute
No
Qualification
As mentioned in job details
Total Vacancies
1 Job
Posted on
Oct 13, 2021
Last Date
Nov 13, 2021
Location(s)
Job Description
HeartFlow is a Software as a Service (SaaS) medical device company. We use cutting-edge technology (deep learning, computational fluid dynamics, cloud-based computing) combined with advanced clinical expertise to revolutionize the treatment of coronary artery disease. We have an exciting and challenging opportunity for a talented and highly experienced Senior Cloud Security Engineering Manager to lead the Application Security and Cloud Security programs at HeartFlow. This position will provide leadership and hands on support in defining cloud security strategy and requirements; and running our cloud security continuous monitoring solution. This solution will be used to measure and enforce HeartFlow’s security policies and detect threats across our cloud infrastructure. This candidate will work across several technology teams within HeartFlow to ensure the security of our SaaS product offering and AWS infrastructure.
The successful candidate will be a hands-on manager with expertise in both cloud and application security and will lead a small team including an Application Security Engineer and Cloud Security Engineer, providing oversight, assistance and hands on technical assistance to Cloud Security Engineering, IT and Information Security teams. This position will work closely and collaborate with Enterprise Security, IT, Development Engineering and DevOps leaders to ensure a convergence of business, technical and security requirements into all aspect of application development and cloud infrastructure.
This role will provide the necessary metrics to provide a clear overview of the work being performed by the Cloud Security Engineering team, compliance with information security standards and the status of risks, vulnerabilities and gaps in our cloud infrastructure and product offerings. The successful candidate is someone who has experienced all facets of cloud security and /or application security and has the knowledge and experience to run the program with minimal guidance needed.Job Responsibilities:- Build out and mature the Cloud Security Engineering function and its related activities including planning, testing, reporting and delivering Cloud Security Engineering services.
- Oversee the deployment and management of the AWS cloud security infrastructure and applications via code and other established pipelines and processes
- Represent security in development and implementation of the overall AWS cloud architecture
- Work with Engineering, Infrastructure Services, and Cloud Security Engineering to choose appropriate solutions and facilitates complete integration into the AWS cloud security infrastructure
- Develop AWS cloud security infrastructure standards in partnership with Risk and Compliance, Engineering, Infrastructure Services, and Application Security
- Identify, recommend and coordinate, delivery of timely knowledge to support teams regarding technologies, processes or tools.
- Lead initiatives designed to share knowledge across the security and technology teams.
- Stay informed of planned and unplanned DevOps, Information Security, IT and/or Engineering projects and activities that may impact other technology teams and communicate between the teams accordingly
- Contribute to the development, improvement and operational management of threat monitoring, detection and response practices in the AWS cloud environment
- In collaboration with the Application Security team, identify and socialize product cybersecurity threats and vulnerabilities for mitigation
- Support planned and ad-hoc regulatory and red team risk assessments of the AWS cloud infrastructure and HeartFlow developed applications
- Provide direct support where possible to assist with AWS cloud infrastructure patching and other remediation of identified security gaps in the AWS cloud infrastructure
- Develop metrics to measure security defensive performance and effectiveness and report on those to stakeholders.
- Collaborate with the product development and application security teams to ensure a convergence of business, technical and security requirements
- Develop and coordinate roadmaps across security, engineering, and IT functions to ensure all goals are prioritized, in sync and cross department dependencies are managed.
Skills and Experience Needed;- 8+ years of experience as a Security Architect and/or Engineer.
- 5 years or more experience with AWS Cloud
- 2+ Years demonstrated experience and track record of attracting, retaining and leading teams with multiple core competencies successfully
- Expert level knowledge of industry standard cloud-native authentication mechanisms such as IAM, KMS, VPC, Security Groups, AWS Inspector, Guard Duty and SCPs
- Experience with deployment orchestration, a
Job Specification
HeartFlow
Information Technology and Services - London, United Kingdom