SECURITY SPECIALIST

Position: Security Specialist Hiring: Contract based Location: Hanoi, Vietnam Working model: Remote - prefer base in Hanoi JD & Deliverables: below Man-day estimation: 38 Payment requirement: when all Deliverables are delivered and met expectations Tentative start month: July 2024 Scope Our client is a leading financial institution dedicated to providing innovative banking solutions. As we transition our on-premises infrastructure to the cloud, we seek a skilled Security Specialist to ensure our migration to AWS is secure and compliant with industry standards such as PCI DSS. The Security Specialist will play a crucial role in our cloud migration project, focusing on securing workloads and ensuring compliance with security standards. The ideal candidate will have extensive experience in AWS, a deep understanding of security practices, and knowledge of regulatory requirements, especially PCI DSS. Key Responsibilities: Lead, implement and maintain including Cloud Security Solutions from AWS, next generation firewalls, application firewall/DDoS, container security and the Web Application Firewall (WAF) the security strategy for migrating on-premises workloads to AWS. • On-Premises Assessment • Conduct risk assessments and vulnerability analyses to identify potential security threats. • Document all aspects of database management, including design, configuration, maintenance, and troubleshooting. • Strategy Development • Work with other Delivery team members to provide security input for Migration Strategy • Collaborate with stakeholders to align migration strategy with business objectives and technical requirements. • Migration • Configure, implement, and support security software/systems that will help ensure compliance in AWS cloud environments. Develop and enforce security policies and procedures to ensure compliance with PCI DSS and other relevant standards. • Collaborate with the cloud architecture team to design and implement secure cloud solutions. • Monitor and audit AWS environments to ensure continuous security compliance. • Respond to security incidents and guide mitigation strategies. • Stay updated with the latest security trends, threats, and technologies. • Testing and Quality Assurance • Perform sample runs and test data ingestion, processing • Create and execute test cases to validate data accuracy and performance • Performance Optimization • Monitor system performance and identify bottlenecks • Optimize Security configurations where needed • Transition to Client • Handover all necessary documentation and knowledge to the customer team • Assist with the transition process and provide ongoing support if required • Provide training and support to internal teams on cloud security best practices. Required Skills and Qualifications: • Technical Skills • Solutions Architect - Associate or Professional, AWS Security Speciality • Minimum of 4+ years experience in implementation and operationalizing cloud security solutions/infrastructure • Proven experience in migrating on-premises workloads to AWS. • In-depth knowledge of AWS services and security features. • Strong understanding of PCI DSS and experience ensuring compliance in cloud environments. • Proficiency in conducting security risk assessments and implementing mitigation strategies. • Experience with security tools and technologies such as firewalls, IDS/IPS, SIEM, and encryption. • Relevant certifications such as AWS Certified Security Specialty, CISSP, CISM, or PCI Professional (PCIP) are highly desirable. • Preferred Skills: • Excellent problem-solving skills and the ability to work under pressure. • Knowledge of DevSecOps practices and tools. • Strong communication and interpersonal skills. • Ability to work collaboratively in a team environment. Project Deliverables • Migration : Successfully migrates the on-premises database to AWS. • Current State Assessment Report : A detailed comprehensive security strategy and conduct risk assessments for AWS migration. • Migration Strategy Document: A strategic roadmap for migrating on-premise applications to AWS Cloud, including timelines, resource requirements, and cost estimates. • Migration Plan: Detailed migration plans for each application, including AWS service selection, architecture design, and implementation steps. • Incident response plan for the AWS environment. • Risk Assessment and Mitigation Plan: Identification of potential challenges and risks, along with mitigation strategies. • Monitoring and audit reports to ensure continuous compliance and threat mitigation. • Migration Runbooks: Comprehensive runbooks for migration processes, including • Inventory list • pre-migration, migration, and post-migration steps. • Environment setup: Creation and configuration of the AWS environment, including database cluster, backup solution • Training and Knowledge Transfer Materials: Documentation to support training and knowledge transfer to internal teams and client personnel. • All document compliance with PCI DSS and other relevant security standards.