Senior Cloud Security Engineer

Key Responsibilities

• Designs, develops and implements new cloud security technologies to support RWS business and technology solutions .
• Evaluate and respond to alerts and events from the security tools, including tuning of tool configuration to minimize false positives, development of event response documentation and processes for Security Operations Center response to follow for event actions, and escalating to appropriate teams for event response.
• Work with the Cloud Operations teams in the definition and implementation of security standards and best practices.
• Ensure our cloud environments comply with industry standard security benchmarks.
• Support the regulatory compliance initiatives, processes, and documentation for ISO 27001, FedRAMP, HIPAA, PCI-DSS, SOC2, etc.
• Implement cloud security initiatives for the entire organization Improve Cloud security posture and Kubernetes security using CI/CD Understand by regular gap assessment, Provide support in detection and mitigation of cyber security vulnerability and incidents for Cloud.
• Work collaboratively with cross-functional teams to enhance the overall security posture. Mentor junior team members and contribute to the development of the team's skills and capabilities. Collaborating with Cybersecurity Architects and Engineers to implement new functionality in the cloud.

Skills & Experience

• Experience handling infosec projects through the full life-cycle.
• List any licenses or certifications required by the position: AWS, CISSP, CCSP, GPCS, CCSK, CISM, GSEC, X509, CSSP, CISA
• 3+ years' experience with Cloud Technologies. (AWS, Azure, GCP, Alibaba).
• Experience deploying and customizing security tools to address threats and lower risk: CSPM, vulnerability scanners, static analyzers, web application firewalls, IDS/IPS, endpoint security monitoring, etc.
• Experience using CI/CD pipelines to perform automated security testing and change management.
• Experience in at least one scripting language (Bash, Python, Java, etc).
• Experience with AWS security controls or equivalent cloud security experience.
• Understanding of Devops/Devsecops , IaC concepts and CI/CD tooling/pipelines.