Senior Cloud Security Engineer - R01573020

Primary Skills

• SAP GRC, Nessus, Information Security & Cybersecurity, Cloud Security, Archer, Metasploit, Wireshark, Burpsuite, AWS Secrets Manager, Nmap, PaaS - Security, CxSAST, Web Application Scanning (WAS), ServiceNow GRC, AppScan

Key Responsibilities

This role combines cloud security engineering, infrastructure protection, automation, and cross-functional collaboration.

• Security Automation: Develop and implement automated security tools, frameworks, and guardrails that enable engineering teams to adopt secure-by-default practices without impacting development velocity.
• Cloud Infrastructure Security: Design, implement, and maintain scalable security controls to protect cloud infrastructure, applications, and enterprise environments.
• Security Engineering: Partner with engineering and security teams to implement critical security enhancements, strengthen security configurations, and improve cloud security posture.
• Cross-Functional Collaboration: Build strong partnerships with engineering, infrastructure, and technology stakeholders to integrate security throughout the development lifecycle.
• Security Incident Response: Support the investigation and response to security incidents, identify root causes, and collaborate with teams to implement preventive measures.
• Third-Party Security Assessments: Conduct security assessments of third-party integrations, emerging AI tools, and technology solutions to ensure data protection, integrity, and regulatory compliance.
• Threat Modeling: Participate in threat modeling and architecture reviews to identify potential vulnerabilities and attack vectors early in the development lifecycle.
• Security Enablement: Guide and educate development teams on security best practices, vulnerability remediation, and effective risk mitigation strategies.

Required Qualifications and Skills

• Minimum of 5+ years of experience in information security, cybersecurity, or a related field, including at least 2+ years of hands-on cloud security experience.
• Strong understanding of cloud platforms and their security capabilities, particularly AWS, including:
• IAM
• EC2
• VPC
• ECR
• ECS
• EKS
• Strong understanding of Microsoft Azure services and cloud security configurations.
• Foundational knowledge of Google Cloud Platform (GCP) and its security capabilities.
• Hands-on experience with Cloud-Native Application Protection Platforms (CNAPP) or similar cloud security solutions, such as Wiz, Orca Security, Lacework, or Upwind.
• Proficiency in at least one programming or scripting language, such as Python or Go, for security automation and tooling development.
• Strong understanding of fundamental security principles, including:
• Principle of Least Privilege
• Defense-in-Depth
• Security Monitoring and Threat Detection
• Cloud Security Posture Management
• Experience with containerization technologies such as Docker and orchestration platforms such as Kubernetes.
• Strong analytical, troubleshooting, and problem-solving skills, with the ability to assess complex security risks and recommend effective mitigation strategies.
• Excellent communication and collaboration skills, with the ability to explain technical security risks and remediation approaches to both technical and non-technical stakeholders.
• Ability to work closely with engineering teams to promote security awareness and drive continuous improvement in security practices.

Preferred Qualifications

• Experience working with multi-cloud environments, including GCP and Oracle Cloud Infrastructure (OCI).
• Knowledge of multi-cloud networking, infrastructure security, and cloud architecture.
• Experience designing and implementing cloud-agnostic security solutions and frameworks.
• Exposure to emerging AI technologies and associated security risks.