Senior Information Security Specialist

Description We are seeking an experienced, hands-on Senior Information Security Specialist to join our Global IT & Cyber department. The role designs, implements, operates and continuously improves security controls across on-premises data centers and cloud environments, with a strong focus on asset protection, operational resilience and regulatory compliance in a global financial environment.

Responsibilities

Global Infrastructure & SOC Operations

• Secure Ava. Trade's global infrastructure (on-premises and cloud)
• Improve and support SOC operations, detection workflows and incident response
• Operate and continuously enhance IT and cybersecurity tools and platforms
• Collaborate with IT, DevOps and Security teams to ensure alignment with ITGC and security best practices Security Engineering
• Configure, troubleshoot and maintain security solutions, including: o Firewalls (Forti. Gate) o Web Application Firewalls (WAF) o Network Access Control (NAC) o Endpoint security platforms o Mail gateways o DLP solutions o DDoS protection services o AI security controls (AI gateway, DLP for AI prompts, AI usage monitoring) Linux & Windows System Security
• Perform OS-level security hardening, patching and configuration management
• Troubleshoot security-related system incidents
• Ensure OS configurations align with internal security baselines and compliance standards AWS Cloud Security & Governance
• Implement and maintain AWS Identity & Access hardening: o IAM roles, policies and least-privilege access o IAM Identity Center (SSO) with MFA o IAM Access Analyzer
• Manage AWS Organizations and Service Control Policies (SCPs)
• Operate AWS Config for compliance and drift detection Logging, Detection & Monitoring
• Operate and enhance security monitoring and detection services (Guard. Duty)
• Centralize security logs and alerts using Cloud. Watch, Event. Bridge and S3
• Ensure full traceability of security-relevant events across cloud and on-prem environments Microsoft Defender XDR
• Operate and tune the Microsoft Defender XDR suite: o Defender for Endpoint (EDR, attack surface reduction, device isolation) o Defender for Office 365 (phishing, safe links and attachments) o Defender for Identity and Defender for Cloud Apps o Defender for Cloud (posture management across Azure, AWS and multi-cloud)
• Triage and investigate Defender incidents and alerts, and run advanced hunting with KQL
• Drive remediation through Defender Vulnerability Management and Secure Score Mobile & Endpoint Device Management (MDM)
• Manage Windows, macOS, iOS and Android devices with Microsoft Intune
• Enforce device compliance policies tied to Entra ID Conditional Access
• Manage device enrollment (Windows Autopilot, Apple Business Manager)
• Enforce disk encryption (Bit. Locker, File. Vault), OS update rings and security baselines
• Protect corporate data on BYOD devices with app protection policies (MAM)
• Handle lost or compromised devices: remote lock, wipe and retire Data Protection & Cloud Protection
• Enforce data protection and encryption using AWS KMS, Secrets Manager and ACM
• Operate Route 53 DNS logging and Route 53 Resolver DNS Firewall
• Enable VPC Flow Logs
• Implement AWS WAF and DDoS protection mechanisms Infrastructure as Code, Vulnerability & Compliance
• Implement Infrastructure as Code (IaC) using Terraform
• Use Git-based workflows for infrastructure and security configuration
• Enforce policy-as-code, peer review and auditable change control
• Maintain vulnerability management processes and ensure continuous remediation
• Contribute to security policies, procedures and audit documentation Security Automation & AI Agents
• Design, build and maintain AI agents that support daily security operations: alert triage, incident enrichment and investigation, vulnerability prioritization and compliance reporting
• Integrate agents with security platforms (Defender, Intune, Forti. Gate, AWS/OCI, SIEM) through their APIs
• Ensure agents run securely: least-privilege access, human approval for impactful actions, full logging and audit trail

Requirements

Mandatory

• Minimum 4 years of hands-on Linux and Windows OS system administration experience
• Hands-on experience with firewalls (Forti. Gate)
• Experience with Web Application Firewalls (WAF)
• Experience with Network Access Control (NAC)
• Experience with security monitoring tools and SOC operations
• Hands-on experience with AWS security services: o IAM o AWS Organizations o AWS Config o Cloud. Trail
• Fortinet NSE4 or NSE5 (minimum)
• High-level English, written and verbal, for work with global teams, vendors and auditors Advantage
• Oracle Cloud Infrastructure (OCI) IAM experience – IAM policies, compartments, Identity Domains, dynamic groups and least-privilege access
• Hands-on Microsoft Defender XDR experience (Endpoint, Office 365, Identity, Cloud Apps, Cloud), including KQL advanced hunting
• MDM experience with Microsoft Intune – compliance, Conditional Access, Autopilot, app protection policies
• Experience building AI agents that automate day-to-day security work (alert triage, investigation, reporting, remediation workflows), using LLM APIs and agent frameworks with Python
• Higher-level Fortinet certification (NSE6 / NSE7)
• Azure security experience
• Advanced Terraform experience
• Scripting (Python, Bash, Power. Shell)
• Penetration testing knowledge
• Experience supporting audits and regulatory compliance