Head of Cloud Security

Head of Cloud Security at cloud.ru, Moscow. 3+ years experience. Salary discussed at interview. Hybrid work.

Responsibilities: • Use cloud platform security services; • Develop and implement secure-by-default settings for cloud services; • Create security baselines for all cloud services; • Form and control cybersecurity requirements for cloud service usage; • Participate in company IT system migration to the cloud; • Identify potential attack vectors in cloud services; • Create automated security configuration checks in the cloud; • Interact with cybersecurity teams responsible for overlay security controls; • Continuously improve security of cloud-hosted infrastructure; • Act as customer for new cybersecurity features; • Manage a group of 2-3 security engineers.

• Experience with cloud platforms (AWS, Azure, GCP, Yandex) - 3+ years; • Knowledge of authentication and authorization protocols (OAuth 2.0, OIDC, SAML, etc.); • Experience with IAM solutions (cloud provider or on-premise); • Experience with Kubernetes and containerization at the user level; • Knowledge and experience with Infrastructure as Code (Terraform, CloudFormation); • Experience with CI/CD pipeline security; • Understanding OWASP Top 10; • Understanding REST/gRPC API principles; • Goal management, team management.