Cloud Security Engineer Jobs

About The Position

Requirements

• At least 3 years of experience in Information Security, or relevant academic/professional training combined with the required security experience.
• At least 2 years of hands-on Information Security experience in an organization with 1,000+ users.
• At least 2 years of experience within the last 5 years in Cloud Security, DevOps, or Cloud Infrastructure Engineering.
• At least 2 years of hands-on experience with AWS, including multi-account environments.
• At least 2 years of experience with cloud security architecture and AWS security services such as IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail, or equivalent technologies.
• At least 2 years of hands-on experience with Terraform or equivalent IaC technologies, including writing and maintaining infrastructure code.
• Experience with cloud identity and permission models, including resource policies, cross-account trust, permission boundaries, and privilege escalation paths.
• Experience migrating infrastructure from on-premises environments to AWS.
• Experience implementing cloud security controls in at least 3 areas, such as IAM, secrets/key management, service hardening, organizational policies, logging and visibility, and automated response.
• At least 2 years of experience with cloud networking and communication protocols, including VPC, Security Groups, routing, and external exposure.
• Strong understanding of networking concepts and troubleshooting, including the OSI model, routing protocols, subnetting, and routing priorities.
• Knowledge of Windows and Linux environments.
• Native-level Hebrew and strong English communication skills.

Nice To Haves

• 3 years of experience building or expanding AWS Landing Zones or multi-account AWS environments.
• Hands-on experience with Firewalls, SASE, NAC, IPSEC, and VPN technologies.
• 3 years of scripting and automation experience using Python, Bash, or similar technologies.
• AWS professional certification such as AWS Certified Security – Specialty, Solutions Architect – Professional, or DevOps Engineer – Professional.

Responsibilities

• Operate, maintain, implement, and troubleshoot cloud security systems and infrastructure.
• Implement security controls and secure configurations across AWS services and infrastructure.
• Work with AWS native security services, including IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail.
• Manage cloud identities, permissions, resource policies, cross-account access, and privilege controls.
• Develop and maintain security infrastructure and controls as code using Terraform or equivalent IaC technologies.
• Implement security controls across IAM, secrets and key management, service hardening, logging and visibility, and security automation.
• Work with AWS networking components, including VPCs, Security Groups, routing, subnetting, and external connectivity.
• Support cloud migration projects from on-premises environments to AWS.
• Participate in projects from planning and design through implementation and production.
• Troubleshoot complex cloud security, networking, and infrastructure issues.
• Create and maintain technical documentation and operational procedures.