Cloud Secuirty Engineer

Department: Information Technology

Reports To: Senior Manager, IT Security & Compliance

SUMMARY

Responsible for ensuring the security of our cloud-based infrastructure and applications, safeguarding sensitive data, and mitigating potential security threats. You will work closely with cross-functional teams to design, implement, and maintain robust security measures that align with industry best practices and compliance standards.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Cloud Security Strategy: Develop and implement comprehensive cloud security strategies to protect our infrastructure, data, and applications hosted on cloud platforms.
• Security Architecture: Design secure cloud architectures, considering factors such as network security, identity and access management (IAM), data encryption, and secure deployment practices.
• Risk Assessment and Compliance: Conduct regular risk assessments and vulnerability scans to identify security gaps and ensure compliance with relevant regulations (e.g., PCI-DSS, SOC 2, HIPAA, etc.) and industry standards (e.g., CIS benchmarks).
• Incident Response and Threat Management: Develop and maintain incident response plans, and lead investigations into security incidents and breaches. Implement proactive measures for threat detection and mitigation.
• Identity and Access Management (IAM): Implement and manage robust IAM solutions to control access to cloud resources, including user authentication, authorization, and privilege management.
• Security Automation: Implement security automation and orchestration tools to streamline security operations and enhance response times to security events.
• Security Monitoring and Logging: Configure and manage security monitoring tools to continuously monitor cloud environments for suspicious activities and security events. Develop and maintain centralized logging solutions for comprehensive visibility into cloud activities.
• Security Education and Awareness: Provide security training and awareness programs to educate employees on best security practices and promote a culture of security awareness throughout the organization
• Other Duties as required.
• Protects the company s assets and financial information by ensuring the accuracy and effectiveness of internal control procedures and informing management and/or appropriate officials of potential fraud risk.

SUPERVISORY RESPONSIBILITIES

• No supervisory responsibilities.

QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, or related field or equivalent experience
• Proven experience (2-4 years) working in cloud security roles, with hands-on experience in securing cloud environments (Azure, OCI).
• In-depth knowledge of cloud security principles, best practices, and industry standards.
• Strong understanding of networking concepts, including TCP/IP, DNS, VPN, and firewalls.
• Experience with security tools such as SIEM, API scanners, WAF, and vulnerability management scanners.
• Relevant certifications such as Security + or Certified Cloud Security Professional (CCSP) Cloud Security Specialty certifications are preferred.
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.

REQUIRED SKILLS/ABILITIES

LANGUAGE SKILLS

• Ability to read, analyze, and interpret general business information.
• Possess strong communication and presentation skills, both written and verbal, and the ability to communicate effectively with different levels of the business via phone, written, and in-person communication.
• Ability to effectively present information and respond to questions from executives, buyers, managers, stores, customers, and the public.

MATHEMATICAL SKILLS

• Ability to demonstrate generally accepted knowledge of merchandising principles.
• The ability to understand and use financial data, such as fractions, percentages, ratios, gross margin, net sales, etc., to make decisions and influence outcomes.

REASONING ABILITY

• Ability to define problems, collect data, establish facts, and draw valid conclusions.
• The ability to think strategically, synthesize data, identify trends, and recommend viable solutions.
• Able to use rigorous logic and methods to solve problems with effective solutions.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

While performing the duties of this job, the employee is frequently required to stand; walk; sit; use hands to type, handle, or feel; and talk or hear.

WORK ENVIRONMENT

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.