Senior Cloud Security Engineer - R01573020
About The Position
The Senior Cloud Security Engineer combines cloud security engineering, infrastructure protection, automation, and cross-functional collaboration. The role develops automated security tools, frameworks, and guardrails to support secure-by-default engineering without slowing development. It designs, implements, and maintains scalable controls for cloud infrastructure, applications, and enterprise environments, and partners with engineering and security teams to strengthen configurations and improve cloud security posture. The position also supports incident investigations and preventive measures, assesses third-party integrations and emerging AI tools, contributes to threat modeling and architecture reviews, and guides development teams on security best practices and remediation.
Requirements
- At least 5 years of experience in information security, cybersecurity, or a related field, including at least 2 years of hands-on cloud security experience.
- Strong understanding of cloud platforms and security capabilities, particularly AWS services including IAM, EC2, VPC, ECR, ECS, and EKS.
- Strong understanding of Microsoft Azure services and cloud security configurations.
- Foundational knowledge of Google Cloud Platform and its security capabilities.
- Hands-on experience with CNAPP or similar cloud security solutions, such as Wiz, Orca Security, Lacework, or Upwind.
- Proficiency in at least one programming or scripting language, such as Python or Go, for security automation and tooling development.
- Strong understanding of least privilege, defense-in-depth, security monitoring and threat detection, and cloud security posture management.
- Experience with containerization technologies such as Docker and orchestration platforms such as Kubernetes.
- Strong analytical, troubleshooting, and problem-solving skills, including assessing complex security risks and recommending mitigation strategies.
- Excellent communication and collaboration skills, including explaining technical risks and remediation to technical and non-technical stakeholders.
- Ability to work closely with engineering teams to promote security awareness and continuous improvement in security practices.
Nice To Haves
- Experience with multi-cloud environments, including GCP and Oracle Cloud Infrastructure (OCI).
- Knowledge of multi-cloud networking, infrastructure security, and cloud architecture.
- Experience designing and implementing cloud-agnostic security solutions and frameworks.
- Exposure to emerging AI technologies and associated security risks.
Responsibilities
- Develop and implement automated security tools, frameworks, and guardrails that enable secure-by-default practices without impacting development velocity.
- Design, implement, and maintain scalable security controls for cloud infrastructure, applications, and enterprise environments.
- Partner with engineering and security teams to implement security enhancements, strengthen configurations, and improve cloud security posture.
- Collaborate with engineering, infrastructure, and technology stakeholders to integrate security throughout the development lifecycle.
- Support security incident investigations and response, identify root causes, and collaborate on preventive measures.
- Conduct security assessments of third-party integrations, emerging AI tools, and technology solutions for data protection, integrity, and regulatory compliance.
- Participate in threat modeling and architecture reviews to identify vulnerabilities and attack vectors early in development.
- Guide and educate development teams on security best practices, vulnerability remediation, and risk mitigation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
