Position: Security Specialist

Hiring: Contract based

Location: Hanoi, Vietnam

Working model: Remote - prefer base in Hanoi

​JD & Deliverables: below

Man-day estimation: 38

Payment requirement: when all Deliverables are delivered and met expectations

Tentative start month: July 2024

Scope

Our client is a leading financial institution dedicated to providing innovative banking solutions. As we transition our on-premises infrastructure to the cloud, we seek a skilled Security Specialist to ensure our migration to AWS is secure and compliant with industry standards such as PCI DSS.

The Security Specialist will play a crucial role in our cloud migration project, focusing on securing workloads and ensuring compliance with security standards. The ideal candidate will have extensive experience in AWS, a deep understanding of security practices, and knowledge of regulatory requirements, especially PCI DSS.

Key Responsibilities:

Lead, implement and maintain including Cloud Security Solutions from AWS, next generation firewalls, application firewall/DDoS, container security and the Web Application Firewall (WAF) the security strategy for migrating on-premises workloads to AWS.

• On-Premises Assessment

• Conduct risk assessments and vulnerability analyses to identify potential security threats.
• Document all aspects of database management, including design, configuration, maintenance, and troubleshooting.

• Strategy Development

• Work with other Delivery team members to provide security input for Migration Strategy
• Collaborate with stakeholders to align migration strategy with business objectives and technical requirements.

• Migration

• Configure, implement, and support security software/systems that will help ensure compliance in AWS cloud environments. Develop and enforce security policies and procedures to ensure compliance with PCI DSS and other relevant standards.
• Collaborate with the cloud architecture team to design and implement secure cloud solutions.
• Monitor and audit AWS environments to ensure continuous security compliance.
• Respond to security incidents and guide mitigation strategies.
• Stay updated with the latest security trends, threats, and technologies.

• Testing and Quality Assurance

• Perform sample runs and test data ingestion, processing
• Create and execute test cases to validate data accuracy and performance

• Performance Optimization

• Monitor system performance and identify bottlenecks
• Optimize Security configurations where needed

• Transition to Client

• Handover all necessary documentation and knowledge to the customer team
• Assist with the transition process and provide ongoing support if required
• Provide training and support to internal teams on cloud security best practices.

Required Skills and Qualifications:

• Technical Skills

• Solutions Architect - Associate or Professional, AWS Security Speciality
• Minimum of 4+ years experience in implementation and operationalizing cloud security solutions/infrastructure
• Proven experience in migrating on-premises workloads to AWS.
• In-depth knowledge of AWS services and security features.
• Strong understanding of PCI DSS and experience ensuring compliance in cloud environments.
• Proficiency in conducting security risk assessments and implementing mitigation strategies.
• Experience with security tools and technologies such as firewalls, IDS/IPS, SIEM, and encryption.
• Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or PCI Professional (PCIP) are highly desirable.

• Preferred Skills:

• Excellent problem-solving skills and the ability to work under pressure.
• Knowledge of DevSecOps practices and tools.
• Strong communication and interpersonal skills.
• Ability to work collaboratively in a team environment.

Project Deliverables

• Migration: Successfully migrates the on-premises database to AWS.
• Current State Assessment Report: A detailed comprehensive security strategy and conduct risk assessments for AWS migration.
• Migration Strategy Document: A strategic roadmap for migrating on-premise applications to AWS Cloud, including timelines, resource requirements, and cost estimates.
• Migration Plan: Detailed migration plans for each application, including AWS service selection, architecture design, and implementation steps.
• Incident response plan for the AWS environment.
• Risk Assessment and Mitigation Plan: Identification of potential challenges and risks, along with mitigation strategies.
• Monitoring and audit reports to ensure continuous compliance and threat mitigation.
• Migration Runbooks: Comprehensive runbooks for migration processes, including
• Inventory list
• pre-migration, migration, and post-migration steps.
• Environment setup: Creation and configuration of the AWS environment, including database cluster, backup solution
• Training and Knowledge Transfer Materials: Documentation to support training and knowledge transfer to internal teams and client personnel.
• All document compliance with PCI DSS and other relevant security standards.