Cloud Security Consultant

You in GFT

You will work with and learn from top IT experts. You will join a crew of experienced engineers: 70% of our employees are senior level. You will be part of QA community composed of over 100 engineers.

Interested in the cloud? You will enjoy our full support in developing your skills: training programs, certifications and our internal community of experts. We have strong partnerships with top cloud providers: Google, Amazon and Microsoft - we are number one in Poland in numbers of GCP certificates. Apart from GCP, you can also develop in AWS or Azure.

We are focused on development and knowledge sharing. Internal expert communities provide a comfortable environment where you can develop your skillset in areas such as Big Data, cloud computing or artificial intelligence.

What will you do?

As a Cloud Security Consultant you will be responsible for defining and developing the overall IT security architecture of cloud deployments for GFT customers and GFT internal projects. 

You will advise to GFT customers in implementing security controls and help the stakeholders in any affair concerning cloud security. You will be responsible for managing security assessments to determine cloud security condition. 

Equally to the above responsibilities, you will be part of Global Security Practice team and take part in defining GFT security offering, especially oriented for Google and Azure services. You will participate in reviews of cloud security products to provide technical guidance on where GFT offering should follow in mid- and long-term.

• Involvement to customer’ projects: 30-80%
• Involvement to internal projects: 20-60%
• Involvement to security offering activities: up to 20%

The target involvement can vary and change in the course of time, depending on the current internal clients’ and customers’ demands.

This role requires presence  in one of our offices: Lodz, Warsaw, Krakow or Poznan 3-4 times per month.

We're looking for two consultants, one regular and one senior, so if you don't fit all the requirements but still think you'd be a good fit, apply

Main job tasks and responsibilities:

• Designing security architecture for cloud deployments, minimum safeguards, introduce security baselines (mostly Azure, Google on 2nd place)
• Supporting customer stakeholders in any affair concerning cloud security topics
• Providing deep technical advisory to the customers and internal IT teams to follow the best cloud security practices
• Deploying and maintaining 3rd party security products in cloud environments for GFT customers, especially CNAPP/CSPM/CWPP
• Conducting risk, network and vulnerability evaluations against defined security requirements
• Contributing to the compliance evaluations against internal and external financial regulations that touch cloud deployments
• Support internal IT teams in implementing security requirements security good practices
• Contributing to the Global Security Practice in building common knowledge base on cyber security / information security
• Participation in bids, offering creation and pre-sales activities (rarely)
• Researching for latest cloud security threats, analyse the current situation and provide feedback for internal cloud security knowledge base. Provide the solutions or workarounds to mitigate the risks

Required skills:

• At least 2 years of experience in IT Security required
• Good English written/verbal communication skill (B2+)
• Deep architectural knowledge in the area of at least one of the leading cloud providers is needed (Azure, GCP); hybrid/multi-cloud integrations’ knowledge would be highly appreciated
• Demonstrated understanding of IT Security domains: security and risk management, asset security, security architecture and engineering, communications and network security, identity and access management, security assessment and testing
• Experience with Microsoft Azure DevOps: security settings, features and security risks for the service
• Knowledge about Landing Zone aspects and Infrastructure-as-Code (IaC) for GCP and security services related to it
• Experience with containers eg. GKE, AKS, docker for GCP and Azure cloud
• Hands-on experience in DevSecOps, SSDLC, CI/CD security pipeline would be of great advantage
• Knowledge of IT security frameworks and standards is required (ISO2700x, CIS Benchmarks, NIST)
• Completed certification in on or more enlisted cloud security paths: CCSK by CSA, CCSP by (ISC)2, AZ-500 by Microsoft, SCS-C01 by AWS, PCSE by Google
• Certification in CISSP or CASP+ will be of advantage
• Cross-sectional knowledge of the basics of security technology is required: SIEM, SOAR, IDAM, DLP, IAM, PIM/PUM, BDS; hands-on experience with the usage or deployments of at least one of those would be of a great advantage
• Good presentation skills to provide clear and supportive information to non-technical audience
• Ability to work autonomously and to lead tasks assigned from the beginning to the end
• Being able to work with many tasks at the same time
• Good team skills, open for other cultures
• Being a team player, we appreciate a sense of humour in our team

We offer you:

• Working in a highly experienced and dedicated team
• Competitive salary and extra benefit package that can be tailored to your personal needs (private medical coverage, sport & recreation package, lunch subsidy, life insurance, etc.)
• Permanent contract or B2B contract
• On-line training and certifications fit for career path
• Free on-line foreign languages lessons
• Regular social events
• Access to e-learning platform
• Ergonomic and functional working space with 2 monitors