Cloud Security Lead, Haven Technologies

• BS in Computer Science or Related
• 5+ years experience in Security
• 2+ years of Cloud engineering security/infrastructure
• Experience in deploying, supporting and building infrastructure for highly distributed and scalable systems living in AWS/Azure
• Expertise with IaaC (we use Terraform)
• Experience with ELK/OpenSearch
• Experience with kubernetes and containers
• Scripting experience (preferable python, javascript)
• Experience in explaining complex problems and solutions to people
• Experience in investigating security issues in a large distributed cloud environment
• Authorized to work in the US with or without sponsorship

Desirable

• You will be joining a small, experienced Information Security team tasked with guiding and carrying out Haven Tech’s security agenda
• You will be collaborating closely with your team, as well as working hand-in-hand with employees across the broader organization to ensure that security best practices are a standard part of the way our company operates
• In addition to strong technical skills, this role will require out-of-the-box thinking and thoughtfulness about how and why you do what you do
• The job will be varied and challenging, using the latest tools, techniques, and apps
• The ideal candidate will require experience in SRE, with a security based mindset
• Design, implement, and manage robust security solutions using Zero-Trust principles
• Conduct regular security assessments to ensure compliance with industry standards and regulatory requirements like HIPAA/ SOC2
• Lead incident response efforts in the event of a security breach, including containment, investigation, and recovery. Document and report security incidents, providing recommendations for improvement
• Implement and manage data protection mechanisms such as encryption, tokenization, and data masking to safeguard sensitive information
• Design, implement and maintain network security architectures including firewalls, VPNs, and segregated networks to protect the cloud environment
• Leverage Infrastructure as code (IaC) and other automation tools to deploy security measures at scale. Implement security as code practices to integrate into the CI/CD pipelines. Ensure security is baked into the infrastructure from the onset
• Be a security advocate within the organization. Provide guidance and training to development teams on best practices for security. Stay abreast of the latest security features and threats to continuously improve the security posture