Senior Cloud Security Engineer

About the role

We create possibilities that move life and commerce forward

Welcome to Manhattan. Every day, our supply chain commerce technology connects two billion people to 20 billion consumer choices. In the warehouse, on the road and in the store, we make what was once impossible, possible. If you want to tackle complex problems and redefine markets, you’ve come to the right place.

• Architect, design, and continuously improve security across all major cloud platforms – Google Cloud, Microsoft Azure, Amazon Web Services (AWS), and Oracle Cloud – to ensure the confidentiality, integrity, and availability of cloud-based and Internet-accessible systems and services
• Build cloud-native security solutions and tooling from scratch, applying hands-on software engineering and coding expertise to automate and scale security controls
• Lead in-depth project planning and produce clear, comprehensive documentation of security improvements, designs, and architectural decisions
• Partner and coordinate across multiple cross-functional teams to drive security projects through to completion
• Research emerging trends in cloud security and proactively propose improvements and strategic recommendations to leadership
• Manage the organization’s Cloud-Native Application Protection Platform (CNAPP) and drive improvements to the CNAPP platform in order to accomplish cloud security goals
• Build security controls and respond to risks related to the security of client, company, and employee information across multi-cloud environments
• Review cyber risks and provide guidance regarding remediation of gaps to facilitate a hardened multi-cloud environment

Minimum Requirements

• 7+ years of IT experience
• 5+ years of security experience
• 4+ years of hands-on cloud experience, with demonstrated expertise designing security architecture across multiple major cloud providers
• High-level, hands-on experience creating security architecture and guiding security improvements across all major clouds – specifically Google Cloud, Microsoft Azure, AWS, and Oracle Cloud
• Demonstrated coding experience and a proven track record of building cloud-native security solutions from the ground up
• 3+ years of experience developing and running scripts and using one or more scripting/programming languages (e.g., Python, Go, PowerShell, Bash)
• 3+ years of experience identifying and remediating security vulnerabilities in cloud environments
• Proven ability to conduct in-depth project planning and to document security improvements clearly for both technical and executive audiences
• Proven ability to work with and coordinate across different teams to drive projects to completion
• Ability to research new and emerging trends in cloud security and translate them into actionable proposals for leadership
• Excellent understanding of cloud networking, identity and access management, encryption fundamentals, and secure configuration standards
• Excellent written and verbal communication skills
• Ability to troubleshoot complex security problems independently
• Ability to accurately document security designs and major incident reports viewable by executive leaders
• Ability to properly handle confidential and sensitive information
• Ability to pass US federal government background investigation

Education Requirements

• Bachelor’s degree in information systems, computer science, or comparable experience
• CISSP certification preferred
• Cloud security certifications highly desired (e.g., Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security)
• CEH, CHFI, SSCP, or Security+ a plus essential functions
• Architect and guide security improvements across Google Cloud, Azure, AWS, and Oracle Cloud, ensuring infrastructure designs and configurations meet security standards
• Design and build cloud-native security solutions and automation tooling from scratch, leveraging coding and software engineering skills
• Manage the CNAPP platform and drive improvements to it in order to accomplish cloud security goals
• Lead in-depth project planning for security initiatives and maintain thorough documentation of architectural decisions and security improvements
• Collaborate with and coordinate across multiple teams to drive security projects from concept through completion
• Research emerging cloud security trends and present improvement proposals and strategic recommendations to leadership
• Make design change recommendations for improvements to the multi-cloud environments and associated services and configurations
• Participate in and contribute to setting and improving cloud security standards
• Serve as subject matter expert on platform and architecture security across cloud environments

Additional Characteristics

• Understanding of containerization and orchestration (Docker, Kubernetes, ECS, GKE, AKS, etc.)
• Experience with infrastructure-as-code and policy-as-code (Terraform, CloudFormation, OPA, etc.)
• Understanding of NIST, CIS Benchmarks, and ISO 27001 controls
• Understanding of business impact and critical needs for IT services
• Ability to manage tasks independently and escalate as necessary
• Ability to function in a dynamic environment and manage multiple priorities to meet deadlines
• Strong attention to detail
• Desire to learn security best practices and promote security throughout the organization

Committed to diversity and inclusion

• At Manhattan, it’s about more than just the work.
• From cultural celebrations to interest groups to volunteer opportunities, your true self is always welcome here.
• Our team members’ backgrounds, experiences and perspectives add to us as a whole and make us unique.