•Minimum 5 years previous experience as a Security Analyst or Security Architect with deep knowledge of AWS native security tools.
•Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes: secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security within SaaS, IaaS, PaaS, and other cloud environments
•Experience with service-oriented architecture for cloud-based services, working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.
•Familiarity with REST API design Hands on programming and scripting experience (Python, Java etc.) DevOps container/orchestration tools (Kubernetes, Docker, etc.) Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.)
•Experience with deployment orchestration, automation, and security configuration management
•Experience as an information Security consultant/Architect in Banking and Financial services.
•A solid technical background with experience in system delivery including SDLC and security tools and technologies. Agile framework.
•Familiarity with standard network security technology solutions: e.g. firewall, router, VPN, IDS.
Additional familiarity with the use of standard security technology solutions and processes such as: access control, user provisioning, directory, SIEM, vulnerability management, Cloud Access Security Brokers, Data Loss prevention solutions, anti-virus, single sign on, auditing, PKI and Cryptography.
•Understanding of network protocols, network topologies, virtual infrastructure, network segmentation, operating systems, databases, applications, and mobile security
•Understanding of FFIEC, GLBA and SOX and their applicability to technologies and applications and privacy laws (GDPR & CCPA)
•Knowledge and experience in vulnerability and risk related security and regulatory frameworks including ISO 27001, NIST and OWASP Top 20
•Excellent organizational, written and verbal communication skills.
•Need to be a Senior level and able to manage projects on their own with strong knowledge of Security and Technology Architecture
•High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity
•Excellent interpersonal skills
•Good command of spoken and written English