Cloud Security Engineer

Cloud Security Engineer

Responsible for the secure operations of cloud infrastructure, platforms, and software, installation, maintenance, and improvement of cloud computing environments. Develop new designs and security strategies across cloud-based applications, including infrastructure, platform, and SaaS.

Responsibilities

• Creating cloud-based infrastructure and programs including implementing identity and access management and configuring cloud environments securely.
• Managing cloud security posture management, identifying and prioritizing security risks and working with stakeholders on remediation plans.
• Performing penetration testing and threat simulations to identify potential risks.
• Managing cryptography and encryption in the cloud.
• Monitoring for and responding to incidents in the cloud environment.
• Keeping cloud infrastructure current, making recommendations, and continually improving cloud security technologies.
• Analyzing, designing, and developing programs, shell scripts, tests, and infrastructure automation capabilities.
• Working with analysts, engineers, developers, and architects across the organization to review and address risks and continually improve cyber resilience.

Requirements

• 5+ years of hands-on technical expertise in technology automation, implementation, integration, and/or deployment
• 3+ years of experience with compliance and common industry security standards.
• Understanding architectural implications of meeting any industry standards such as ISO 27001, HIPAA, and NIST frameworks, and GDPR standards a plus.
• Understanding of Cloud Security Concepts (SaaS, PaaS, IaaS), Network and Application Security and /or Data protection.
• Knowledge of terraform, ansible, PowerShell, python scripting languages.
• Knowledge of application and cloud security industry leading standards

CISSP, CISM or equivalent certifications.

Skills:

• Proficient in software testing methodologies and best practices.
• Strong experience with DAST (Burp Suite, OWASP ZAP, Rapid7 InsightAppSec, Metasploit, …) and SAST (SonarQube, Veracode, Snyk, …) tools for comprehensive application security testing.
• API Security Testing (Postman, SoapUI).
• Dependency Checking (OWASP Dependency-Check, WhiteSource).
• Hands-on experience with software testing in Java and/or .NET environments.
• Familiarity with delivery and orchestration tools (Kubernetes, Docker, Jenkins).
• Excellent problem-solving and analytical skills.
• Strong communication and collaboration abilities.