Cloud Security Engineer-1

The Vanguard Group•Dallas, TX

25d•Hybrid

About The Position

The Cloud Security Engineer provides intermediate-level technical support for designing, implementing, and maintaining cloud security controls, identity and access management (IAM) policies, and security frameworks within AWS environments. The role identifies, investigates, resolves, or escalates AWS Cloud Security and IAM-related issues and works with cross-functional teams to strengthen the organization's cloud security posture. As a member of the Cloud Identity Security team within the Enterprise Security & Fraud organization, the engineer helps protect cloud infrastructure through vulnerability management, security monitoring, access governance, policy enforcement, and continuous security improvement initiatives.

Requirements

Minimum of three years of related work experience.
Undergraduate degree in a related field or an equivalent combination of training and experience.
Strong knowledge of AWS cloud security frameworks, security best practices, governance models, and compliance requirements.
Proficiency with AWS platforms and services, IAM policies, roles, permissions, and AWS API actions, including hands-on security configuration experience.
Strong analytical and problem-solving skills to diagnose and resolve complex AWS Cloud Security and AWS IAM issues.
Experience with cloud security monitoring, security event investigation, log analysis, and incident response processes.
Ability to collaborate with cross-functional teams and communicate security concepts to technical and non-technical stakeholders.
Knowledge of identity security, access governance, privileged access management, and cloud-native security controls.
Familiarity with vulnerability management, risk assessment, threat detection, and security compliance programs.

Nice To Haves

Experience with automation tools and scripting languages such as Python, JSON, YAML, and Rego for security operations and policy automation.
Hands-on experience with DevSecOps practices and CI/CD technologies, including CloudFormation and Terraform.
Experience with Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM) solutions such as Wiz.

Responsibilities

Design, implement, deploy, and maintain cloud security solutions, controls, and platforms to mitigate threats, vulnerabilities, and operational risks in AWS environments.
Support and monitor cloud security technologies, using monitoring tools, alerting systems, and security applications to assess their effectiveness.
Investigate, troubleshoot, resolve, or escalate AWS Cloud Security and AWS IAM incidents, access-related issues, and security events.
Develop, maintain, and enhance cloud security standards, controls, testing procedures, log analysis processes, and vulnerability assessment methodologies.
Perform security reviews, risk assessments, and remediation activities to strengthen cloud security and compliance.
Monitor system access logs, audit trails, and security events for suspicious activity, anomalous behavior, or unauthorized access attempts.
Collaborate with engineering, infrastructure, DevOps, and application development teams to implement secure cloud solutions and promote security best practices.
Support identity and access management initiatives, including access controls, role-based access management, least-privilege principles, and cloud identity governance.
Maintain technical documentation, operational procedures, security standards, and team and department knowledge base articles.
Participate in security-focused projects, cloud modernization initiatives, and other duties as assigned.
Identify opportunities to improve cloud security processes, automation, operational efficiency, and risk reduction.