Job DescriptionThe impact you will have in this role:Being a member of CISO team, the Principal Cloud Security Engineer will be a part of Cloud Security Engineering team and the purpose of Cloud Security Engineering team is to provide outstanding and versatile cloud security services to the enterprise securing the workloads, application and data in AWS, Azure and GCP. The ideal person is passionate about building, mentoring and leading a highly motivated cloud security team.
Your Primary Responsibilities:- Align cloud security strategy with business objectives and regulatory requirements for IaaS, PaaS, and SaaS
- Identify deficiencies in cloud security services, propose plans for improvement and implement them.
- Find opportunities for automation and improving AI/ML capabilities cross the technology stack.
- Evaluate and create cloud security baselines and implement monitoring to assure compliance.
- Document security policies, controls, and processes, and develop runbooks and how-to guides for operational readiness of engineered solutions.
- Mentor junior cybersecurity engineers specialized in securing cloud and cloud assets including workloads, containers, applications and data.
- Partner closely with stakeholders to prepare new security technologies and functionalities for implementation into the production environment. This includes but is not limited to, security standard methodologies.
**NOTE: The Primary Responsibilities of this role are not limited to the details above. **Qualifications:- Minimum of 8 years of related experience
- Bachelor's degree and/or equivalent experience
Talents Needed for Success:- Experience managing a team
- 8+ years of proven experience with public Cloud environments, specifically AWS.
- Additional Cloud computing experience with Azure, GCP, and Containerization is a plus.
- Experience with Wiz.
- Understanding of Terraform, CI/CD and deployment architectures.
- Experience with vulnerability management, SIEM, compliance to security baselines, and Identity and Access Management in the cloud and on-prem (AD, Ping, ADFS, etc.).
- Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing (NIST 800-53, ISO-27001, etc.).
- Experience with delivering reliable, available, and high-performance enterprise-scale solutions.
- Programming experience one or more of the following languages: Python, C#, C++, PowerShell, Bash, Terraform, and SQL as well as experience with GIT version control (GITFlow, GitHub, BitBucket, etc.)
- One or more of the following certifications: Cloud (AWS, Azure, Google Cloud Platform), CISSP.
The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations.
