Section Manager - Security Standards & Design

CP Axtra (Makro Pro) is hiring a Section Manager for Security Standards & Design to own its library of technical security standards, hardening baselines, and design governance processes. The role writes CIS-aligned hardening guides for Windows, Linux, databases, and cloud services, runs proof-of-concept tests for new security controls, and builds automated compliance checks to detect configuration drift.

Candidates need 5+ years in information security with hands-on infrastructure hardening experience, deep knowledge of CIS Benchmarks or DISA STIGs, experience with vulnerability scanning tools such as Tenable or Qualys, scripting skills in PowerShell, Bash, or Python, and the ability to write clear technical documentation. The role partners with infrastructure, cloud, and DevOps teams to embed baselines into golden images, Terraform modules, and CI/CD templates.

Develop and maintain technical security hardening baselines for Windows Server, RHEL/Ubuntu, databases (Oracle, MSSQL, PostgreSQL), and cloud services across GCP, Azure, AWS

Translate security architecture decisions into implementable standards documents with acceptance criteria, configuration examples, and validation scripts

Run proof-of-concept testing for new security controls, documenting performance impact and integration requirements

Build and maintain automated compliance scanning using tools like Tenable, Qualys, or cloud-native benchmarks

Conduct technical security configuration reviews for new infrastructure deployments, cloud landing zones, and major application releases before go-live

5+ years in information security with hands-on infrastructure hardening, security configuration, and technical standards development

Deep knowledge of CIS Benchmarks or DISA STIGs with real implementation experience

Hands-on experience with at least two of: Windows Server hardening, Linux hardening, database security configuration, or cloud security baselines

Experience with vulnerability scanning and compliance tools such as Tenable, Qualys, AWS Config, Azure Policy, or GCP Security Health Analytics

Working proficiency in scripting (PowerShell, Bash, or Python) for configuration validation and automation