Job description
HI Folks
Please check the JD and share your updated resume to my email and ping me on whatsapp ( ) along with your resume
JOB DESCRIPTION
Cloud & CI/CD Security SME
100% Remote
6 months contract
We are seeking a remote Cloud & CI/CD Security SME to join a global consulting firm. This person would be joining their Security Operations - Attack Surface Management (ASM) team within the organizations Information Security & Risk Management (ISRM) function as a Subject Matter Expert in Cloud security, CI/CD pipeline security, and Infrastructure-As-Code (IaC) security. This person will be responsible for owning the end-to-end lifecycle of security finding, from detection and triage through remediation guidance, SLA tracking, escalation, and closure across the organizations multi-cloud environment, CI/CD pipelines, and code repositories.
You would be expected to provide remediation guidance on cloud and code security matters to engineering, DevOps, and architecture teams, while building and maintaining runbooks and operational playbooks for the ASM team.
REQUIRED SKILLS AND EXPERIENCE
-3–6 years of hands-on experience in cloud security operations, DevSecOps, CI/CD security, or a closely related security engineering role -Deep experience securing CI/CD pipelines (security of the pipeline infrastructure itself and security within the pipeline) -Ability to script and automate operational security workflows -Hands-on experience investigating and remediating hardcoded secrets in production repositories, including credential rotation, commit-history remediation, and prevention strategy design -Demonstrated skill in reviewing IaC templates for security misconfigurations and writing specific, developer-friendly remediation guidance -Solid understanding of IAM design, cloud networking, and secure configuration principles across at major cloud platforms (AWS preferred) -Experience managing security findings against SLAs in an enterprise environment including escalation, exception handling, and stakeholder communication -Ability to translate complex technical findings into clear, actionable remediation guidance for both developers and non-technical stakeholders -Comfort working in a globally distributed team with cross-functional dependencies across cloud engineering, DevOps, and architecture groups -Experience working within a complex, matrix-structured global organization -Ability to operate and tune cloud security posture tooling at enterprise scale, including policy customization, alert lifecycle management, and cross-team remediation workflows
NICE TO HAVE SKILLS AND EXPERIENCE
-Relevant industry certifications in cloud security or container security -Experience with IT service management platforms for incident tracking and workflow management -Familiarity with agile delivery practices and sprint-based work management -Experience contributing to compliance audit preparation or evidence collection -Bachelor’s degree in Computer Science, Information Technology, or equivalent practical experience
Prepare your application
Use the description above to assess your fit for Sapphire Software Solutions Inc. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.