Lead Cloud Security

Implement security and compliance strategy that will meet Cloud and Network Infrastructure security requirements.

Ensure effective implementation of specific architectures enabled by security technologies and services.

Improve current security and compliance capabilities of cloud and networks across our global infrastructure.

Prevent, detect and respond to abusive activities targeting MTBC Cloud Platform by researching and developing detection techniques and solutions.

Troubleshoot issues and product vulnerabilities to implement large-scale quality improvements.

Overseeing threat modeling for applications and services to identify security threats, weaknesses and associated countermeasures.

Develop the spam/abuse fighting strategy for the product or product feature.

Oversee the continuous monitoring and protection of information processing resources and serve as the focal point for enterprise security incident response planning and execution.

Assess viability and applicability of security technologies as they become available

Cloud Application Security Assessments.

The ideal candidate should possess a combination of strong technical knowledge across multiple security domains especially in cloud security and a solid development background.

Implement and maintain enterprise security policies, procedures, and standards in order to improve overall effectiveness of internal security controls.

Tools / Skills:

Hands on experience and in-depth technical knowledge in cloud security, computer and network security, authentication and security protocols.

Hands on experience working with microservices and container technologies.

Hands on experience with the development, deployment, and automation of security solutions with CI/CD in Cloud environment

In depth knowledge of network based, system level, and application layer attacks and mitigation methods

Hands on experience with a broad range of security technologies.

Strong knowledge of technology and security topics including network and application security (OWASP), infrastructure hardening, security baselines, web server, and database security

Expertise in cloud automation tools.

Strong applied cryptography and its implementation is a plus (asymmetric and symmetric key encryption, key management etc.)