Security Specialists - AWS, API, (SC Cleared)

This job has now expired please search on the home page to find live IT Jobs.

Security Specialists - AWS, API, (SC Cleared), SOAP, Restful APIs, JWT, JWS/JWE, JOSE, CI, CD, Java, OAUTH, OIDC, SAML, SSO, MFA, PAM, DLP, IDS, SC Clearance, DV Clearance, DV Cleared, NCSC Cloud, Cloud, Azure, Monitoring, Firewall, Audit, SSL/TLS, API Gateways, AV, IDS/IPS/HIDS, Pen-testing, Central Government, Public Sector,

Specialist will work closely with the Lead Architect and will be required to collaborate with DevOps, Developers, Security Architect, Information Assurance to produce low level technical security designs for AWS hosted solutions, establishing security best practices in API/application development, contributing to evaluation of new products from a security perspective.

* Hands-on specialist to identify the security needs working with multiple teams developing public/private API, Web Interfaces utilising AWS products.

* Design/develop and document required security controls and components in collaboration with Tech Leads and Architects.

* Provide in-depth technology input to other technology stakeholders and be responsible for low level security design.

* Evaluation and implementation of the new products from security perspective

* 50/50 Code and Security Documentation split

* Detailed design and implementation of the PAM, IDS, DLP in AWS

* Prepare and present necessary security governance documentation in collaboration with Security Architect

* Define the counter measures for security risks and actively implement.

Key Skills / Experience

* Have demonstrable experience of AWS services and AWS security best practices.

* Have demonstrable experience of implementing prevention and proactive monitoring of advanced security attacks and emerging attack vectors.

* Have demonstrable experience in API security (SOAP/REST) and industry standard best practices to secure a public/private API hosted in cloud.

* Have demonstrable experience of implementing security aspects of application development cycle CI/CD.

* Have demonstrable experience of successfully delivering digital solutions that collect and manage personal and/or sensitive information with appropriate controls and protection.

* Have demonstrable hands-on development experience utilising Java, API Gateway/Management & Policy frameworks, SOAP & Resful APIs, JWT, JWS/JWE, JOSE..

* Have demonstrable experience of documenting low level security design and ability to work in a established design and governance process.

* Have demonstrable experience of security tools and techniques (PKI, PAM, IAM, Protective Monitoring, Firewall, Audit, SSL/TLS, API Gateways, AV, IDS/IPS/HIDS, Pen-testing)

* Have demonstrable experience of security protocols OAUTH, OIDC, SAML, SSO and MFA.

* Have demonstrable experience of successfully design, implementation and migration of SOAP based API services from legacy technologies utilising Amazon AWS.

* Have demonstrable experience of migrating applications and services from traditional data centre and infrastructure, network, to AWS cloud.

* Have demonstrable experience of implementing NCSC cloud security principles

* Have demonstrable experience of migrating services off PSN to public cloud infrastructure.

* Should have either vendor or industry standard IT Security certification(s)

* Have existing, valid SC Clearance