What you’ll do:

• Assess, implement, automate, and document security processes and controls within Everbridge’s cloud platforms, including Amazon Web Service (AWS), Google Cloud Platform (GCP) and Microsoft Azure
• Collaborate with product development teams to ensure that security controls are appropriately implemented and operating effectively
• Work with product engineering and release teams to develop procedures to automate security tasks during code builds, testing, and deployments
• Collaborate with the corporate IT team to ensure that enterprise security controls are appropriately implemented and operating effectively
• Implement  controls required to meet security, compliance, and audit requirements
• Create and share unique ways to solve challenges with others
• Provide tooling and automation to support the mission of the Everbridge Security team.
• Respond to and, when appropriate, resolve or escalate security incidents
• Identify and report unresolved security exposures, misuse of resources, and noncompliance situations using defined escalation processes
• Implement security tools
• Perform security testing and assessment
• Proactively stay current with developments in relevant technologies
• Assist and train team members in the use of cloud security tools and the resolution of security issues
• Keep on top of security events and technologies. 

What you’ll bring:

• Minimum 5 years of information security experience with with top-tier cloud computing companies.  AWS experience required
• Minimum 5 years of experience with security products, web and mobile application security, infrastructure security, cryptography, identity management and broader security technologies.
• Security certifications such as: Certified Information Systems Auditor (CISA), SANS GIAC, CompTIA Security+, CompTIA CASP, Certified Ethical Hacker (CEH)
• Experience with a common vulnerability management solution such as Qualys, container scanners, etc
• Experience with DevSecOps tools and processes
• Experience with the development, deployment, and automation of security solutions in AWS required.  Experience with GCP and Azure is desired.
• Solid understanding of Amazon Web Services (AWS) including Control Tower, Security Hub, Detective, IAM, KMS, CloudTrail, GuardDuty, VPC, ELB, EC2, Config, CloudFormation, Lambda, AWS CLI and others
• Experience performing penetration tests and reviewing code and/or architectures
• Experience with a broad range of security technologies, including SAST, DLP, IDS/IPS, IAM, Certificate Management, etc...
• Knowledge of network-based, system-level, and application-layer attacks and mitigation methods
• Some level of proficiency with commonly used coding/scripting languages such as bash, python, go, etc...
• Working knowledge of Nmap, Nessus, Kali Linux, Wireshark, Metasploit Framework, and other security-related tools

Bonus if:

• Certified Information Systems Security Professional (CISSP)
• Knowledge of technical security control environments and compliance frameworks, including CSA CCM, ISO 27017, FedRAMP
• AWS cloud practitioner certification
• Experience working with Forensic tools.
• Experience working with container technologies
• Experience with configuration management systems such as salt and terraform
• Interesting projects in your GitHub repository
• Enjoying puzzles