Solution Architect - Information Security

Role & responsibilities:

Cloud Security.

• Review and design secure cloud architecture for workloads hosted on AWS, Azure, or other cloud platforms.
• Implement and monitor cloud security controls related to IAM, network security, encryption, logging, backup, workload protection, and secure configuration.
• Perform cloud security posture reviews against benchmarks such as CIS, ISO 27001, NIST, and regulatory requirements.
• Review security of cloud services such as compute, storage, databases, Kubernetes, serverless, and SaaS integrations.
• Support implementation of CSPM, CWPP, CNAPP, cloud workload protection, and cloud vulnerability management solutions.
• Ensure secure configuration of cloud accounts, VPC/VNet, security groups, route tables, firewalls, WAF, KMS, storage buckets, and privileged access.
• Monitor cloud security alerts and coordinate remediation with relevant teams.
• Support cloud incident response, log review, threat investigation, and root cause analysis.

Endpoint Security

• Design, implement, and manage endpoint security controls across laptops, desktops, servers, and mobile devices.
• Support deployment and management of EDR/XDR, antivirus, device control, host firewall, disk encryption, patching, and vulnerability remediation.
• Define endpoint hardening baselines for Windows, Linux, and server environments.
• Review endpoint compliance status, malware alerts, suspicious activities, unauthorized software, and policy violations.
• Coordinate with IT teams for patch management, endpoint hygiene, asset visibility, and secure configuration enforcement.
• Support endpoint incident response, malware analysis coordination, containment, and recovery activities.
• Review endpoint logs and integrate endpoint security alerts with SIEM/SOC platforms.

Required Skills:

• Good understanding of cloud security concepts across AWS, Azure, or similar platforms.
• Knowledge of endpoint security tools such as EDR, XDR, antivirus, device control, encryption, and patch management.
• Familiarity with vulnerability assessment, patch management, secure configuration, and security hardening.
• Understanding Windows and Linux endpoint/server security. • Good documentation and reporting skills.