شرح موقعیت
Endpoint & Cloud Security Responsibilities Develop and enforce endpoint security policies and procedures. Guide IT/network teams on security best practices. Implement and manage endpoint protection against malware/ransomware. Lead end‑to‑end security projects (design → implementation → testing → documentation). Design, troubleshoot, and implement Microsoft 365 & Azure security/compliance solutions. Build Microsoft 365 security/compliance integrations. Conduct PoC testing for new security technologies. Design and implement DLP (Microsoft Purview) and encryption for cloud/on‑prem data. Work with GRC teams to resolve audit findings and implement remediation. Infrastructure Security Assessment Database security reviews for SQL Server, Oracle, PostgreSQL, MySQL, MongoDB. Web/app server security for IIS, Apache Tomcat, JBoss. Assess servers, networks, databases, middleware, virtualization, cloud environments. Review configurations against CIS Benchmarks, NIST, vendor standards. IAM experience: AD, LDAP, RBAC, PAM, authentication, identity lifecycle. Regulatory compliance: GDPR, UAE PDPL, CBUAE, PCI DSS, ISO 27001, ISR. Container Security Assessment Assess Docker, Podman, CRI‑O, Kubernetes, OpenShift for vulnerabilities & misconfigurations. Harden container images (minimal base images, signature validation, trusted registries). Review Kubernetes manifests, Helm charts, RBAC, admission controls, network policies. Evaluate API access controls, service accounts, secrets management. Assess Kubernetes network policies, segmentation, Istio/Linkerd service mesh security. Review TLS/mTLS for pod/service communications. Secure CI/CD supply chain (Trivy, Anchore, Clair, SBOM validation). Runtime monitoring using Falco, Aqua, Prisma Cloud, Sysdig. CI/CD Automation Security Assessment Assess Jenkins, GitLab CI/CD, GitHub Actions for vulnerabilities & misconfigurations. Secure build/deployment processes and artifact integrity. Enforce SAST, DAST, SCA, secrets scanning, container scanning via quality gates. Evaluate integrations with cloud services, repos, registries, container platforms. Assess software supply chain risks (dependency confusion, tampering). Integrate CI/CD logs with SIEM; ensure forensic readiness. Cloud Security Assessments Security assessments across Azure, AWS, GCP, OCI. Review cloud security architecture (networking, segmentation, identity, RBAC, conditional access). Evaluate CASB controls for visibility, governance, data protection, threat management. Assess cloud posture using CSPM tools (e.g., Wiz). Assess SaaS posture via SSPM platforms. Evaluate cloud data protection using Microsoft Purview (classification, encryption, DLP). AI Security Architecture Assessment Assess AI/ML lifecycle security (data → model → deployment → operation → retirement). Review secure AI architecture (trust boundaries, segmentation, identity, API security, encryption, logging). Apply AI risk/governance frameworks to define controls and assurance activities. Project Management Plan and execute security projects (scope, deliverables, timelines, resources). Communicate with technical teams, business owners, vendors, senior stakeholders. Manage risks, issues, dependencies, change requests. Coordinate vendors and ensure contractual deliverables. Security Certifications SC‑401 (Microsoft Information Security Administrator) SC‑900 (Microsoft Security, Compliance & Identity Fundamentals) CISSP CCSK