Cloud Network Security Engineer

Key Responsibilities:

IaC Security Scanning & Hardening:

Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.

Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).

Develop custom policies for IaC scanning tools based on organizational security standards.

Firewall Implementation & Tuning:

Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).

Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.

Conduct regular reviews and audits of firewall configurations and access controls.

Risk Management & Compliance:

Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).

Support internal and external audits by providing documentation and evidence of controls.