Job Description :
Role Summary/Purpose
The successful candidate will be a highly technical member of a small team, reporting directly to the DevSecOps leader. They will be responsible for assisting in the continuous iteration and improvement of the Firm''s security posture, by communicating and assisting customers with cloud security adoption, strategy and technologies. The right candidate would have a broad and deep skill set with a passion for security, automation and continuous improvement. Additionally, they would have an Interest in cloud computing and how it can add value to the business.

Essential Responsibilities:
The candidate will partner closely with stakeholders across Infrastructure teams, functional IT Teams, product management/engineering and the open source community - to:
Provide advice on security best practices.
Guide customers in developing, adopting and enforcing security and access policies appropriate to their environments.
Perform vulnerability assessments, deliver remediation recommendations, and aid in resolving identified vulnerabilities.
Maintain and improve the existing cloud security monitoring strategy and toolset

Additional Responsibilities:
Collaborate to optimize and automate security processes and services.
Evaluate and recommend new and emerging security products and technologies.
Help define and shape the future of DevSecOps at GEA
Work with various teams to create, update, and implement Information Security designs, standards and procedures.

Qualifications:
Strong security background, with a minimum of 2 years hands-on experience in an information security role.
Strong understanding of AWS fundamentals, with a minimum of 1 year hands-on experience.
Strong skills in at least one scripting language (Ruby/Python or equivalent
Experience with automation, containerization and source control tools, such as Jenkins, Git and Docker.

Preferred:
AWS Certified Systems Architect – Associate
CISSP or equivalent security accreditation
Solid understanding of ISO 270001 and/or similar