What you get to do every day

• Perform security architecture design reviews and provide recommendations to improve the security posture of KUBRA’s application, database, and cloud platforms
• Perform periodic testing, code analysis, and security assessments of KUBRA owned applications
• Govern cloud security systems for change and configuration control thereby suggesting changes to further improve the overall security posture
• Partner with DevSecOps, Application and Infrastructure teams to ensure any vulnerabilities or issues are resolved per security guidelines 
• Stay up to date with current cyber security risk and analyze trends to proactively prevent problems
• Develop an overall organizational data strategy that is in line with business processes and contractual requirements
• Ability to provision secure cloud infrastructure leveraging Infrastructure-as-Code
• Identify and provide guidance on appropriate controls based on industry standards (e.g. CCM) to drive cloud and customer security solutions framework based on business risk and cloud native threats
• Participate in SDLC process to assess security requirements and controls and ensure that security controls are implemented as planned
• Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls
• Ensure logging and monitoring of all critical infrastructure is in place

What kind of person should you be?

• Ability to detail and effectively discriminate relevant logs / security events
• Ability to handle multiple tasks and projects concurrently
• Excellent written and verbal communication skills
• Ability to plan and manage complex security projects, and meet the deadlines
• Excellent organization, time management and problem-solving skills
• Ability to handle pressure under minimum or no direct supervision
• Excellent verbal, written and interpersonal skills

What skills do you need?

• A degree in Information Technology, Computer Science or related field
• 7-10+ years of Cloud Security Architecture experience
• 5+ years of relevant experience in Information Security Risk & Industry best practice
• 5+ years of DevSecOps and/or DevOps experience automating security tools
• Strong understanding of Application and Cloud Security
• Knowledge of Zero Trust Architecture principles and best practices
• Knowledge of ISO27001, NIST, PCI, SOC, etc


Certifications, preferred but not required:
• SABSA (Sherwood Applied Business Security Architecture) 
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• AWS Solution Architect Professional

What can you expect from us?

• Award-winning culture that fosters growth, diversity and inclusion for all
• Paid day off for your birthday
• Access to LinkedIn learning courses
• Continued education with our education reimbursement program
• Free unlimited access to our refreshment stations (fully stocked with tea, coffee and other beverages)
• Two paid days for volunteer opportunities
• Well-being days