Description

Lead Cloud Security Solutions Consultant

Permanent

Location:UK, Remote

Expected starting salary:£46,000 - £57,500

Closing date:13th August 2024

Who we are:

Global Technology Services (GTS) is Aegon's global IT partner that provides infrastructure services, information security and global/corporate application support for Aegon's businesses around the world.

From 6 locations in the US, the Netherlands, UK, and Hungary, we support 20+ country units and 24000+ employees in the world. Our support consists of a wide range of centralised global IT services such as programming, database management, project management, agile/dev/ops, and more.

We continue to maximise the value from having a clear digital and data technology platform strategy that extends our ecosystem, as an approach to digitisation, enhancing customer experience, and improving operational efficiency.

All these teams work closely together to provide innovative and digital solutions as well as critical technology support. This is essential for enabling Aegon's businesses around the globe to be innovative, digital, and competitive, efficient, and effective, and to provide the best solutions and customer experience for our customers and shareholders.

The Job:

The Lead Cloud Security Solutions Consultant role is part of the Cloud Security Team and is responsible for ensuring the secure design and delivery of Cloud solutions to the Engineering teams, based on customer needs; a Security Specialist who is responsible for delivering technical guidance and educating Cloud teams on continuous security practices for their infrastructure and applications. This role specialises in all aspects of information security management as well as business and regulatory compliance using Cloud services in large-scale computing environments.

What You Will Do:

Provide technical guidance and leadership to engineers to deliver quality solutions utilised by multiple lines of business. Continue to drive the team toward delivery of the best end to end design solutions for the enterprise.

Interact with senior leadership and stakeholders at all levels of the organisation. Provide clear direction on Cloud security priorities and goals assisting with the delivery of tactical goals towards strategic milestones.

Design solutions for improving Cloud Security and for increased and automated enforcement of cloud security guardrails and standards.

Work collaboratively with application architects, application & analytics teams, and vendor partners for broader adoption of Cloud Infrastructure and cloud engineering.

Supports the end-to-end solution throughout its constructions, providing support to the scrum team and stakeholders.

Attend workshops, work with the architecture group and other software architects to discuss the end-to-end solution and highlight any risks or areas of special concerns.

Coaches the team to ensure compliance with organisation processes are adhered.

Recommend and implement best practices for Cloud security using AWS IAM, Security Hub, GuardDuty and additional tools.

You will help in the creation and sharing of recommended security practices, technical content and new reference architectures (e.g. white papers, code samples, blog posts) and evangelise about cloud technology and practices.

Advocate on behalf of the country units to help drive continuous improvements to the Cloud platforms, sharing their wants and needs to help drive the Cloud Security roadmap of features.

Act as a champion for Cloud security and secure application development principles.

Act quickly and appropriately to solve problems, bring clarity, and minimise the impact of unforeseen circumstances.

Help develop junior staff through coaching and provide timely performance feedback. Mentor engineers, ensuring a constantly rising bar in technical excellence and professional growth.

We’d love to hear from you if you have:

Experience of working in an Agile/Scrum/Kanban environment as a technical lead of engineers

Specialist in Cloud computing technologies and workload security challenges

Knowledge of AWS Well Architected Framework and Cloud migration industry standards and best practices

Technical writing skills for documenting environments, procedures and security guidelines

Extensive experience with industry compliance and security standards including PCI DSS, SOC-1&2, ISO 27001, NIST/DoD, SAS70, FISMA, HIPAA, and NIST

Extensive experience with IT compliance and risk management requirements (e.g. security, privacy, SOX etc.)

Extensive experience with continuous security practices, including: threat modelling, threat and vulnerability management, secure development pipelines, and automated security compliance

Proven experience developing and executing of comprehensive threat modelling strategies to identify and mitigate security risks within the cloud environment

Demonstrable experience with security solutions such as WAF, IPS, and anti-DDOS systems

Knowledge of network / perimeter security platforms

Extensive experience with encryption in-flight and at-rest practices, as well as certificate and secrets management, security event & incident management (SIEM)

Extensive experience with infrastructure automation, infrastructure as code, automated application deployment, monitoring/telemetry, logging, reporting/dashboarding, and continuous delivery technologies

Extensive experience with orchestration template technologies

Extensive implementation experience with enterprise security packages, identity management and federation systems

Prior programming background in at least ONE language: C++, Java, Python, Ruby etc.

Certifications:

AWS Certified Solutions Architect – Associate

One of the following: CISSP, CISA, CISM, ISO27001 LA/LI, SANS

One of the following: PMP, ISC2 CCSP

It’d also be great – but not essential - if you’ve have::

AWS Security – Specialty certification

AWS Certified Solutions Architect certification

Experience working with global teams

Comfortable working independently, with a good degree of autonomy and initiative, proactive in how you deliver against your workload

What’s in it for you?

Expected starting salary of £46,000 - £57,500, depending on the experience you can bring

A non-contributory pension between 8%-12%

A discretionary bonus, depending on personal and company performance

34 days leave per year (including bank holidays, pro-rated for part-time)

We also offer private medical cover, life assurance, critical illness cover, enhanced parental leave and a variety of lifestyle benefits to help our staff live their best lives, including retail discount vouchers, cycle2work scheme, subsidised restaurant and online GP appointments.

The legal bits

We’ll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some checks we need to complete before you can start with us. This will include a credit and criminal record check, as well as providing satisfactory references. While this is a remote role, you will be required to physically visit one of Aegon’s UK offices to provide ID documentation.

Cifas Short Fair Processing Notice

Equal Opportunity Employer:

We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their age, disability, race, religion/belief, gender, sexual orientation or gender identity.