Senior Cloud Security Operations Engineer

Company: AVEVA Software LLC
Location: Lake Forest
Posted on: January 22, 2023

Job Description:

AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals and minerals - safely, efficiently and more sustainably.We're the first software business in the world to have our sustainability targets validated by the SBTi, and we've been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We've also recently been named as one of the world's most innovative companies.If you're a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at https://www.aveva.com/en/about/careers/.Salary Range:$90,600.00 - $151,200.00Job Title: Senior Cloud Security and Infrastructure Operations Analyst, Cloud DevOpsLocation: Lake Forest, CAAbout the RoleWhen you join AVEVA's Research & Development team, you are joining a global team of over 2000 engineers and computer scientists. We work on more than 75 leading industrial automation and engineering products. Our focus, passion, and collaboration help us to deliver innovative, high-quality, and secure industrial software that delights our customers.At AVEVA, we're all about limitless possibilities. Are you?About the RoleAs part of the Research and Development function, the global Cloud DevOps team combines software development and cloud operations to provide continuous integration and delivery of cloud-enabled products and solutions. Responsible for deployment and continuous monitoring to ensure various cloud-specific customer requirements/SLAs are met.ResponsibilitiesAs a Security and Infrastructure Analyst (AWS & Azure), you will utilise your experience to support, enhance and automate:--- The day-to-day security posture of AVEVA's Cloud solutions.--- The landing zones and the global applications and services hosted within it.--- The security tools and frameworks implemented in AVEVA's Cloud solution.--- Pro-actively identify improvements to AVEVA's Cloud security--- Identify potential new threats to Aveva's Cloud security--- Maintain strong working relationships with AVEVA's Cloud Service Providers and internal teams. Working closely with your development and portfolio colleagues, together you will bring new solutions to the cloud following a standard framework to ensure they are operationally secure, stable, and scalable. The global, 24x7 nature of the team means there may be a requirement for occasional work outside of the standard day and to be on call as part of a shared team rota.--- Monitor and analyse security relevant logs, alerts and events associated with security incidents.--- Respond to security incidents as identified by users or security monitoring tools (e.g. SIEM, IDS/IPS, Firewalls, Anti-Virus/Anti-Malware, Vulnerability Analysis and Identity & Access Management toolsets) to mitigate threats.--- Execute standard operating procedures in response to any security relevant logs, alerts and events.--- Determine Root Cause Analysis for significant security incidents and report on overall security incident levels, which might include conducting forensic analysis.--- Execute incident test scenarios to prove and improve security handling processes.--- Continuously improve security tooling and processes.--- Manage Cloud Infrastructure: Be responsible for the configuration of the Azure and AWS Landing Zones including:--- Account/subscription setup and closure--- Organisation and tenant level services--- Access management--- Cost management--- Centralised security, governance, and reporting services--- Improve cloud estate management processes and tooling.--- Providing support outside of core hours where required.--- Work with development teams to advise and contribute to improvements to security, cost management and cloud compliance.--- Stay current on security industry trends, tools and best practices.QualificationsAVEVA will consider candidates for varied backgrounds and with a broad range of experiences. Knowledge and experience in as many of the following would be favourable:--- Experience of operating/building services in either AWS or Azure. Experience of either or both:Security: --- Setup, management and improvement of a range of core cloud security related technologies deployed in a complex enterprise environment including IDS/IPS, Firewalls, Anti-Virus/Anti-Malware, Vulnerability Analysis and Identity & Access Management toolsets e.g. --- Azure --- Microsoft Defender for Cloud (Azure Security Center) --- Microsoft Azure Sentinel --- AWS --- AWS Security Centre --- AWS GuardDuty --- AWSShield --- Handling security incidents in a cloud environment --- Testing for cloud and application security vulnerabilities in a cloud environment Cloud estate infrastructure management and improvement, including: --- Management of users and access governance and control. --- Setup of AWS accounts, Azure subscriptions, Azure AD tenants etc. --- Configuration management, including definition of cloud infrastructure as code. --- Automation i.e. build and release pipelines, runbooks, serverless (Lamdba or Azure Functions) and scripting--- Experience of definition and management of infrastructure security guard rails, e.g. policies, permission boundaries. --- Any enterprise web application software development experience.--- Penetration testing, or web application / network security experience in general.--- Strong written, verbal and presentation skills, able to convey information clearly and concisely to technical and non-technical audiences.--- Attention to detail, diligent and tenacious.--- Excellent analysis and dissemination skills.--- High degree of personal motivation and ability to self-manage.--- Maintains and develops relevant industry and technology knowledge. ---Working within an Information Security accredited framework e.g. ISO27001, 27017/18. --- DNS, TLS and network architectures. --- Web application security principles and practices, or penetration testing.Certification: Desirable: --- Certifications in Azure and/or AWS e.g. AWS Solutions Architect, Solutions Architect for Azure --- Security related certifications e.g. Microsoft's Security Operations Analyst, AWS Certified Security Specialist, CCSPAbout AVEVAAVEVA is a global leader in industrial software, driving digital transformation and sustainability. By connecting the power of information and artificial intelligence with human insight, AVEVA enables teams to use their data to unlock new value. We call this Performance Intelligence. AVEVA's comprehensive portfolio enables more than 20,000 industrial enterprises to engineer smarter, operate better and drive sustainable efficiency. AVEVA supports customers through a trusted ecosystem that includes 5,500 partners and 5,700 certified developers around the world.The company is headquartered in Cambridge, UK, with over 6,500 employees and 90 offices in over 40 countries. AVEVA is an Equal Opportunity Employer and we take pride in our core values and the diversity of our people, valuing the unique experience and expertise that people from different backgrounds bring to our business. The ability to develop ground-breaking technologies is one of our key assets and our people make it happen.Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.AVEVA requires all successful applicants to undergo and pass a comprehensive background check before they start employment. - Background checks will be conducted in accordance with local laws and may, subject to those laws, -include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. - Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. -Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.

Keywords: AVEVA Software LLC, Lake Forest , Senior Cloud Security Operations Engineer, Engineering , Lake Forest, California