Must Have
- SentinelOne ? deployment, policy config, endpoint agent management
- CyberArk ? PAM implementation, vault and safe configuration
- AWS ? EC2, IAM, Security Groups, ideally AWS Security Specialty certified
- Gold AMI hardening ? CIS benchmarks, image pipeline automation
- CI/CD pipelines ? GitHub Actions
- Infrastructure as Code ? Terraform or CloudFormation
- Linux administration ? hardening, patching, scripting (Bash/Python)
Nice to Have
- SIEM/security monitoring
- Container security ? Docker, ECS or EKS
- Vulnerability management ? experience triaging and remediating CVEs
- Compliance frameworks ? ISO 27001, SOC2 or NHS/DSPT awareness
Soft Skills (For all resources) - This is paramount ??
- Proactive communicator ? speaks up in refinement, demos work
- Self-driven ? doesn't wait to be told what to do
- Comfortable working in an agile scrum team
- Can explain technical decisions clearly to non-technical stakeholders
