CLOUD & PLATFORM SECURITY SPECIALIST

About the Team

The Cloud and Platform Team in SAS provides various capabilities to enable our product teams to build cloud-native solutions with great developer experience and provide them a platform to innovate. We support our product teams who are organized in value streams with several products. The Cloud and Platform Team is segregated into several sub-teams which focus on different areas.

About the Role

As a Security Specialist in the Cloud and Platform Team, you will play a crucial role in developing, implementing, and managing comprehensive security strategies, policies, and procedures to protect against potential threats and vulnerabilities. You will be working closely with product teams and other security specialists in the organization to drive security best practices and ensure we are up to the mark with our security standard.

You will play a key role in driving and implementing security practices for the cloud infrastructure and different phases of the software development lifecycle with the balance of less friction and improve the security posture of the organization.

Challenges you will work on:

• Work on design, implementation, and maintenance of the organization's Cloud IT security infrastructure, including firewalls, intrusion detection systems, SEIM, encryption protocols, and access controls.

• Design and implement the strategy to mitigate Distributed Denial of Services (DDOS), Bot protection and other cyber-attacks.

• Drive, implement and continuous follow up on managing lifecycle of cloud resources using cloud security posture management (CSPM), cloud workload protection platform (CWPP) tools.

• Work closely with sub-team's part of Cloud & Platform to continuously improve the security of the platform and services.

• Collaborate with security team and other cross-functional teams to integrate security best practices into the development, deployment, and maintenance of software applications, systems, and networks following secure development practices.

• Stay up to date with the latest cybersecurity threats, trends, and technologies, and make recommendations for continuous improvement.

• Provide guidance, training, and support Cloud & Platform team members and other stakeholders on security-related matters.

• Assist in compliance efforts with relevant regulatory requirements, audits, industry standards, and internal policies related to information security.

• Collaborate on topics related to disaster recovery, threat modeling exercises, and other security-related activities across the organization.

• Be an advocate of Security in the organization, creating community around security topics and adopting security best practices across the organization.

Who you are:

• Bachelor's or master's degree in computer science, Software Engineering, or relevant experience.

• Proven experience (5+ years) in IT security roles, with a strong understanding of cybersecurity principles, protocols, and technologies.

• Hands-on experience with security tools and technologies, such as SIEM solutions, endpoint protection platforms, identity and access management systems, and network security appliances.

• Hands-on experience with cloud security practices, cloud well architected framework, and security best practices used in cloud environments.

• Kowledge of relevant regulatory frameworks like General Data Protection Regulation (GDPR) and industry standards (e.g., NIST, ISO 27001/2).

• Effective communication and interpersonal skills to collaborate effectively with cross-functional teams, developers, and stakeholders.

• Strong problem-solving abilities, pro-active, data-driven mindset and willing to learn new skills and suggest improvements.

• Drive initiatives in collaboration with the team members, other security representatives and stakeholders.

• A team player, positive attitude, helping and coaching team members.

• Passionate about IT security and thrive on the dynamic challenges posed by the ever-evolving cyber threat landscape.

What we offer:

• Located at SAS head office in Frösundavik, Stockholm with access to gym, restaurant, café etc. along with flexibility to work remotely.

• SAS has an attractive travel offering to all employees with discounted airline tickets for you, your family, and friends to travel the world at competitive prices.

• Good pension scheme and standard benefits as part of collective agreement (Kollektivavtal).

• Opportunity to be a part of digitalization and modernizing our IT landscape journey with cloud native tech stack and modern practices.

• Opportunities for professional development in an international fast-paced working environment.

Deadline for application: 30th June 2024. For questions, please contact Sachin Gharge (Head of Cloud & Platforms), sachin.gharge@sas.se