What You'll Be Doing
The Cloud Security Engineer is responsible for designing, implementing, and maintaining security measures within cloud computing environments. They ensure the confidentiality, integrity, and availability of cloud-based systems and data by conducting risk assessments, developing security policies and procedures, implementing security controls, monitoring security incidents, and responding to and mitigating security breaches. The Cloud Security Engineer collaborates with cross-functional teams to identify and address potential security vulnerabilities and continuously improves the security posture of cloud-based infrastructure and applications.
What We're Looking For
- Identify and resolve security issues across the cloud infrastructure.
- Build, deploy, and manage security tools and services.
- Design and implement scalable processes to provision cloud access.
- Maintain a low-touch, reliable, and user-friendly infrastructure.
- Evaluate and respond to alerts and events from security tools.
- Tune security tool configuration to minimize false positives.
- Develop event response documentation and processes, including diagrams for system environments, cloud operations, and security tools.
- Collaborate with security leadership, engineering, and compliance to execute security strategies.
- Assist other teams in solving security issues that comply with business requirements and best practices.
- Assess our current cloud security and propose improvements or solutions.
- Review our architecture and design through a security lens to provide actionable, timely requirements and recommendations.
- Serve as a subject matter expert for security tools, applications, and processes.
What You'll Bring
- Experience deploying and customizing security tools such as vulnerability scanners, static analyzers, IDS/IPS, firewalls, and endpoint security monitoring.
- Experience using CI/CD pipelines for change management and automated security testing.
- Experience with networking and Unix/Linux servers.
- Experience developing software with object-oriented languages like Python, Java, C++, or Ruby.
- Experience with database programming and administration.
- Experience with log management and/or correlation systems.
- Fluent in one or more programming or scripting languages.
- Thorough understanding of cloud and network security.
- Ability to write SQL queries and build dashboards and reports.
- Knowledge of networking and web protocols.
- Knowledge of modern cloud technology components and deployment patterns.
- Strong communication and collaboration skills.
- Strong analytical problem-solving skills.
Education & Experience
- Minimum Required: Bachelor's degree in computer science, information systems, or a related field.
- Minimum Required: 5+ years of experience working with a public cloud infrastructure, preferably within AWS.
Licenses & Credentials
- NIST or ISO Certification is preferred.
Systems & Technology
- Experience with Python, Java, C++, or Ruby.
- Experience with SQL.
