Staff Cloud Security Engineer (Remote)

The job overview for the Staff Cloud Security Engineer position at Allergan Data Labs is to own the security posture of the cloud infrastructure and solve systematic problems for production security in a product, marketing, and data science environment. The role involves architecting secure standards for technology, creating alignment between security engineering and other engineering disciplines, and partnering with internal organizational security teams to drive adoption of security initiatives. The Staff Cloud Security Engineer will also be responsible for providing security design guidance for complex systems and reducing risk across the company.

• Own the security posture of the cloud infrastructure at Allergan Data Labs
• Solve systematic problems for production security in a product, marketing, and data science environment
• Architect secure standards for technology including Networking, Serverless, Kubernetes, Access Management (IAM/Service Accounts), Secure CI/CD, Cloud Security, and Application Security
• Create alignment between security engineering and various engineering disciplines on the Golden Path for security
• Partner with internal organizational security teams to provide and solicit security guidance, drive adoption of security initiatives, and transform them into actionable strategy
• Create and promote frameworks, patterns, and methodologies that reduce the risk across the company
• Participate in providing security design guidance for complex systems across the company
• Design, implement, and manage the security solutions program for cloud-based applications and infrastructure
• Develop and implement security policies and procedures
• Conduct security assessments and penetration tests
• Drive, monitor, and respond to security incidents
• Collaborate with other teams to ensure the security of cloud-based applications and infrastructure
• Stay up-to-date on the latest security threats and technologies
• Be a part of an Infrastructure Engineering team and DevOps practitioners that support the broader engineering organization

• At least 5+ years in a Security Engineering discipline, plus 3+ years in a DevOps Engineering discipline
• Strong foundation in infrastructure and application security
• Experience with Python, Ruby, Golang, PHP, Javascript, etc.
• Experience deploying and managing Developer Security Platforms and SIEM/CIEM solutions and tools
• Has owned the compliance process for industry standard frameworks like PCI, HIPAA, SOX, NIST CSF, SANS etc
• Familiar with building infrastructure to support Microservices and Event Driven Architecture using Serverless, Lambda, Docker, and Kubernetes
• Proficient with CI/CD pipelines, shell scripting and instrumentation/monitoring solutions (ie, Datadog)
• Proponent of infrastructure-as-code, least privilege access, observability and other DevOps best practices
• Experience working with Software Engineers developing on serverless and containerized platforms
• Bachelor's degree in Computer Science, Information Security, or a related field
• Experience with AWS and Google Cloud
• Experience with security assessment and penetration testing (+tools)
• Experience with security monitoring, security incident management and response
• Experience with security policies and procedures
• Strong understanding of cloud computing security principles
• Strong understanding of security threats and vulnerabilities
• Strong understanding of security technologies
• Strong problem-solving and analytical skills
• Strong communication and collaboration skills

• Competitive salary
• Competitive annual bonus targets
• 401k with dollar for dollar match, up to 6% of eligible earnings
• RSU grants (Long Term Incentives) for approved roles
• Comprehensive medical, dental, vision, and life insurance
• 17 paid holidays per year, including 3 floating holidays
• Annual Paid Time Off (PTO), with separate sick days
• 12 weeks paid Parental Leave
• Caregiver Leave
• Adoption and Surrogacy Assistance Plan
• Flexible workplace accommodations
• Opportunities to attend Lakers, Knicks, Anaheim Ducks, Anaheim Angels, and NY Rangers games
• Opportunities to attend concerts, festivals, and other live entertainment events
• Tuition reimbursement
• Attend a tech or marketing conference of your choice each year
• A MacBook Pro and accompanying hardware
• A modern productivity toolset (Slack, Miro, Loom, Lucid, Google Docs, Atlassian, etc.)
• Generous discounts on SkinMedica skin care products
• Discounted aesthetic treatment days multiple times a year
• $600 worth of Alle benefits each year to use towards aesthetic treatments and products
• Eligible for donation matching to over 1.5 million nonprofit organizations
• Attend AWS Re:Invent in person (Las Vegas) or virtually each year (for certain roles)