Job Title: Cloud Security Architect

Location: Remote

Job Summary

We are seeking an experienced Cloud Security professional with strong expertise in threat modeling, cloud security architecture, cybersecurity practices, and infrastructure security. The ideal candidate will have hands-on Python coding experience, knowledge of Infrastructure as Code (IaC), and an understanding of SDLC and CI/CD pipelines to assess security risks and design secure technical architectures across on-premises and cloud environments.

Key Responsibilities

• Perform threat modeling using methodologies such as STRIDE, PASTA, MITRE ATT&CK, and MITRE ATLAS.

• Design and review technical architectures to identify security risks and recommend appropriate controls.

• Assess security practices related to authentication, authorization, encryption, logging, monitoring, infrastructure security, and network segmentation.

• Evaluate cloud and on-premises environments to identify vulnerabilities and improve security posture.

• Review and analyze Infrastructure as Code (IaC), including Terraform and/or AWS CloudFormation.

• Assess security controls across the Software Development Lifecycle (SDLC) and CI/CD pipelines.

• Develop, read, and interpret scripts using Python to support security analysis and automation.

• Apply cybersecurity best practices to cloud infrastructure and application architectures.

Required Qualifications

• Minimum 6 years of overall IT experience, including at least 4 years in cybersecurity or information security roles.

• Experience securing both on-premises and cloud environments.

• Associate-level or professional-level cloud certification in AWS or Google Cloud Platform (GCP).

• Associate-level or professional-level cybersecurity certification.

• Demonstrated expertise in threat modeling methodologies, including at least one of STRIDE, PASTA, MITRE ATT&CK, or MITRE ATLAS.

• Strong understanding of authentication, authorization, encryption, logging, monitoring, infrastructure security, and network segmentation.

• Ability to design and review technical architectures.

• Hands-on Python coding experience and the ability to write, read, and interpret scripts.

• Knowledge of Infrastructure as Code tools such as Terraform and/or AWS CloudFormation.

• Understanding of SDLC processes and CI/CD pipelines.