Senior Cloud Security Engineer

job Title: Senior Cloud Security Engineer

Role Overview: We are seeking a Senior Cloud Security Engineer to enhance our cloud security infrastructure. This role involves designing and implementing security measures for cloud environments, with a strong focus on AWS. The ideal candidate will have substantial experience with cloud security practices, security technologies, and compliance standards.

Education & Certifications:

• Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Required Certification: AWS Certified Security Specialty (achieved within the last 5 years).
• Preferred Certifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)

Experience & Technical Skills:

1. Professional Experience:
• At least 5 years of experience in IT security, focusing on designing and implementing security architectures for cloud environments.
• Proficient with AWS Cloud Platform, including a deep understanding of cloud security best practices and technologies.
• Experience with security technologies such as firewalls, VPNs, IDS/IPS, WAFs, SIEM, and endpoint security solutions.
• Knowledge of encryption technologies and AWS services including Amazon Cognito, AWS Security Hub, Amazon GuardDuty, and Amazon Inspector.
2. Compliance & Standards:
• Familiarity with industry standards and regulations such as NIST, HIPAA, and SOC 2.
• Experience conducting security assessments and audits to ensure compliance.
3. Skills:
• Strong problem-solving abilities.
• Excellent verbal and written communication skills, including the ability to articulate complex security concepts to non-technical stakeholders.
• Proven capability to work effectively with cross-functional teams.

Key Responsibilities:

• Cloud Security Management:
• Deploy and maintain AWS cloud security controls to ensure secure operations.
• Manage image-stream container deployments, ensuring base image updates trigger necessary rebuilds.
• Oversee automated CI pipeline management and security scans, particularly in container image builds.
• Infrastructure & Automation:
• Support and manage cloud infrastructure using infrastructure-as-code (IaC) and the GitOps operational model.
• Facilitate deployment across multiple container orchestration frameworks and manage business security rules through automated "operator agents."
• Implement and support cloud-native container networking, zero downtime scaling, and backup processes with minimal granularity.
• Security & Compliance:
• Ensure all secrets are stored securely in cloud-native KMS stores.
• Maintain visibility of infrastructure with dashboards and automated network communication patterns.
• Support disaster recovery solutions in different cloud regions with defined RTO/RPO.
• Monitoring & Analysis:
• Manage and analyze security logs, working with IT staff to monitor and respond to potential threats.
• Maintain a centralized log repository and ensure continuous monitoring for vulnerabilities and incidents.
• Additional Support:
• Facilitate mutual TLS for container communications and full cluster visibility.
• Support automated continuous deployment (CD) and chaos operations to test system robustness.

Mail:

Contact:

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.