Job Opportunities API

You will own the library of technical security standards, hardening baselines, and design governance processes that keep CP Axtra's infrastructure secure by default. Think of yourself as the person who takes the architect's blueprint and turns it into the building code that every project must follow. This means writing CIS-aligned hardening guides for Windows, Linux, databases, and cloud services; running POCs to validate that security controls work without breaking production; and building automated compliance checks that catch drift before auditors do. You'll work closely with infrastructure, cloud, and DevOps teams — your standards need to be practical enough that teams adopt them willingly, not just because policy says so. You'll also lead technical testing efforts — validating security configurations, running internal technical assessments, and ensuring that what's documented as 'standard' is actually what's deployed. Key Responsibilities: You will own the library of technical security standards, hardening baselines, and design governance processes that keep CP Axtra's infrastructure secure by default. Think of yourself as the person who takes the architect's blueprint and turns it into the building code that every project must follow. This means writing CIS-aligned hardening guides for Windows, Linux, databases, and cloud services; running POCs to validate that security controls work without breaking production; and building automated compliance checks that catch drift before auditors do. You'll work closely with infrastructure, cloud, and DevOps teams — your standards need to be practical enough that teams adopt them willingly, not just because policy says so. You'll also lead technical testing efforts — validating security configurations, running internal technical assessments, and ensuring that what's documented as 'standard' is actually what's deployed. KEY RESPONSIBILITIES ·       Develop and maintain technical security hardening baselines for all major platforms — Windows Server, RHEL/Ubuntu, databases (Oracle, MSSQL, PostgreSQL), and cloud services across GCP, Azure, AWS ·       Translate security architecture decisions into implementable standards documents with clear acceptance criteria, configuration examples, and validation scripts ·       Run proof-of-concept testing for new security controls and technologies, documenting performance impact, integration requirements, and operational considerations ·       Build and maintain automated compliance scanning — ensuring hardening baselines are continuously validated against deployed configurations using tools like Tenable, Qualys, or cloud-native benchmarks ·       Conduct technical security configuration reviews for new infrastructure deployments, cloud landing zones, and major application releases before go-live ·       Manage the security standards lifecycle — regular reviews, version control, exception management, and sunset processes for deprecated standards ·       Partner with infrastructure and DevOps teams to embed security baselines into golden images, Terraform modules, and CI/CD templates ·       Produce technical testing reports for firewall rule reviews, network segmentation validation, and access control configuration assessments ·       Maintain a standards adoption dashboard — tracking which teams have implemented which baselines and where gaps exist