Summary
About the Role
Major accountability for the Specialist Cloud Platform Security.
- Ensure the security of containerized applications throughout their lifecycle, from development to deployment and runtime.
- Facilitate clear and consistent communication regarding container security to the NKS IT Security organization, ensuring alignment and knowledge sharing.
- Implement and maintain container security best practices and tools.
- Collaborate with developers, DevOps engineers, and cloud security teams to integrate security into the CI/CD pipeline.
- Strong understanding in Vulnerability scanning of container images for security weaknesses.
- Understanding of OWASP top 10 vulnerabilities and remediation
- Implement tools and processes for continuous monitoring of container workloads to detect suspicious activity and potential security threats.
- Proficiency in container security tools for vulnerability scanning, image analysis, and runtime protection.
- Understanding of container orchestration platforms and their security features.
- Responsible for AWS GuardDuty rules review, discuss within security operations team and get those remediated.
- Ensure security components are managed and compliance is maintained throughout their lifecycle.
- Audit, review, and monitor Security: encryption policies, VPC Flow logs, security groups routing tables, ACL's, Elastic Ips
- Cloud Security knowledge for AWS platform and services is required.
- Review and timely approval of exceptions.
Additional Specifications Required for the Position:
- Bachelor’s degree in information technology, Computer Science, or Engineering.
- 7+ years of experience in Cloud infrastructure, Platform Security
- Familiarity with latest container technologies like Docker and Kubernetes.
- Experience supporting infrastructure and services in public and private cloud environments.
(AWS, Azure, GCP, OpenStack etc.)
- Familiarity with CI/CD tools and deployment processes
- Excellent communication skills must be capable of working with cross functional technical.
and business teams and varying levels of management
- Strong project management skills, including excellent presentation skills
- Must be capable of writing detailed solution specifications, diagrams, best practices/standards
documentation, operating procedures, test plans/test reports, etc.
- Experience with virtualization technologies.
- Familiarity with Security monitoring tools
- Problem Solving: Ability to analyse and resolve complex infrastructure resource and application.
deployment issues.
KEY PERFORMANCE INDICATORS / MEASURES OF SUCCESS
- Adherence to the Novartis IMF security standards
- Deliver on time
- Completeness and quality of deliverables
- Customer feedback (expectations met/exceeded)
- Actively contribute to the business with innovative solutions that show results in the form of
cost optimization and / or growth of the business top line revenue.
Why Novartis: Helping people with disease and their families takes more than innovative science. It takes a community of smart, passionate people like you. Collaborating, supporting and inspiring each other. Combining to achieve breakthroughs that change patients’ lives. Ready to create a brighter future together? https://www.novartis.com/about/strategy/people-and-culture
Join our Novartis Network: Not the right Novartis role for you? Sign up to our talent community to stay connected and learn about suitable career opportunities as soon as they come up: https://talentnetwork.novartis.com/network
