Cloud Security Engineer - AWS

Position - Cloud Security Engineer - AWS


Location - Stockholm


The Team is responsible for bridging the gap between our Cloud Platform (AWS), Operations and Developers by building secure solutions that help reduce incidents and resolution time as well as pro-active prevention across the platform. This includes everything from automating surveillance and alarms on an infrastructure and application stack level, to teaching developers how to instrument and monitor their services.


You’ll work in a close collaboration with the Cloud Platform team, the rest of TOC Engineering and other relevant developers


Your solutions will ensure the continued availability and integrity of our product and platform focusing on security surrounding websites, applications and services such as APIs. You will be responsible for providing observability, monitoring and automation to detect, identify and mitigate threats, vulnerabilities and risks. If you are all about Cloud and building security solutions - we have an offer you cannot refuse!


Roles & Responsibilities


- Using a wide array of security tools and services to
monitor our web traffic.
- Developing automation solutions for data collection
and infrastructure as code.
- Developing internal tools, APIs and their
integrations.
- Using AWS solutions to monitor, identify and
mitigate threats in our Cloud platform.
- Aid and support the rest of TOC Engineering in its
responsibilities.

Must have competence end experience in the following areas:


- Web, application and network security using
defense-in-depth strategies.
- Mitigating web base attacks such as SQLi, Cross-site
Scripting and credential stuffing.
- Vulnerability management and incident response
processes.
- Cloud networking architecture, cloud operations,
security, automation and orchestration.
- AWS especially security solutions and services, cloud
infrastructure and implementing infrastructure as
code.
- Data collection and aggregation using solutions such
as ELK, Splunk or Datadog.
- Metrics collection, storage and visualisation using
Prometheus, Grafana, etc.
- Python programming.
- Docker and service containerization.
- Linux.
- Excellent verbal and written communication skills in
English.
- Sharing knowledge and experience to others.


Desired Skill


- Site Reliability Engineering (SRE).
- AWS WAF, Shield and DRT.
- CDN integration.
- Knowledge in other development languages such as
JavaScript and Golang.
- Frontend development in HTML/CSS, etc.
- Code auditing and vulnerability detection.