Job Description
As one of our Security Engineers, you are passionate about security and great engineering practises. You will join a multidisciplinary team, working together with other Security Engineers, Product Managers and Security teams. As an engineer, you will design, build and deliver secure, high-quality enterprise solutions across numerous initiatives within the organisation, spreading your security knowledge to an ever-expanding engineering community, increasing our security posture and helping identify and reduce our risk exposure when building applications.
You will bring subject-matter expertise around Cloud Security to the team. You will be responsible for the design, implementation, and maintenance of our organisation’s cloud-based security systems. You will be a key subject-matter-expert on all things Cloud Security, helping teams make the right decisions when it comes to securing their systems. As a Cloud Security Engineer, you will need to have a thorough understanding of complex IT systems and stay updated with the latest security standards, systems, and authentication protocols, as well as various cloud services and resources.
Responsibilities
* Design, develop, and deploy innovative, AI and data-driven scalable cloud-based security solutions.
* Perform vulnerability testing, risk analysis, and security assessments against our cloud environment.
* Develop and coordinate cloud security procedures and disaster recovery plans.
* Build a deep understanding of our cloud security tooling and drive improvements in coverage and utilisation of the tools.
* Collaborate with Security Operations, Threat & Vulnerability Management and software development teams to ensure cloud solutions are securely integrated with new and existing software and infrastructure.
* Support with conducting security training and awareness programs to educate staff about cloud security risks and responsibilities.
* Work with third-party vendors to ensure that security requirements are met.
* Mentoring/Coaching lesser experienced team members to support their own development
We believe being together in person helps us move faster, connect more deeply, and achieve more as a team. That’s why our approach to working together includes spending at least 2 days a week in the office. It’s a rhythm that speeds up decision-making, helps ASOSers learn from each other more quickly, and builds the kind of culture where people can grow, create, and succeed.
Qualifications
About You:
* Relevant experience gained working in Cloud Security, Platform Engineering, Software Engineering or equivalent roles.
* Proven experience in a cloud computing environment (Azure, AWS, GCP)
* Strong understanding of cloud architecture and security principles
* Strong experience with security tools and technologies
* Knowledge of regulatory requirements and industry standards related to cloud security.
* Knowledge of Infrastructure-as-code (IAC) and an understanding of misconfigurations.
* Experience building applications, scripts, pipelines or automation using modern technologies and languages such as PowerShell, YAML, Python, C#, Java, Docker, Kubernetes
* Experience with implementation of secure configurations and controls via policy and compliance frameworks
* Experience with crafting low-noise detections aligned to real-world attack behaviours
Additional Information
BeneFITS’
* Competitive compensation and performance-related bonuses
* Professional development and career growth support
* Generous paid leave, including additional personal celebration days
* Flexible benefits allowance
* Access to learning resources and internal knowledge-sharing events
* Employee perks and wellness support options