Senior Cloud Security Engineer

Minimum Requirements

• 7+ years of IT experience
• 5+ years of security experience
• 4+ years of hands-on cloud experience, with expertise in Google Cloud, Microsoft Azure, AWS, and Oracle Cloud
• High-level, hands-on experience creating security architecture and guiding security improvements across multiple major clouds
• Proven coding experience and a track record of building cloud-native security solutions from the ground up
• 3+ years of experience developing and running scripts and using programming languages such as Python, Go, PowerShell, Bash
• 3+ years of experience identifying and remediating security vulnerabilities in cloud environments
• Proven ability to conduct in-depth project planning and document security improvements clearly for both technical and executive audiences
• Proven ability to work with and coordinate across different teams to drive projects to completion
• Excellent understanding of cloud networking, identity and access management, encryption fundamentals, and secure configuration standards
• Excellent written and verbal communication skills
• Ability to troubleshoot complex security problems independently
• Ability to accurately document security designs and major incident reports viewable by executive leaders
• Ability to properly handle confidential and sensitive information
• Pass US federal government background investigation

Education Requirements

• Bachelor’s degree in information systems, computer science, or comparable experience
• CISSP certification preferred
• Cloud security certifications highly desired (e.g., Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security)
• CEH, CHFI, SSCP, or Security+ a plus

Essential Functions

1. Architect and guide security improvements across Google Cloud, Azure, AWS, and Oracle Cloud, ensuring infrastructure designs and configurations meet security standards
2. Design and build cloud-native security solutions and automation tooling from scratch, leveraging coding and software engineering skills
3. Manage the CNAPP platform and drive improvements to it in order to accomplish cloud security goals
4. Lead in-depth project planning for security initiatives and maintain thorough documentation of architectural decisions and security improvements
5. Collaborate with and coordinate across multiple teams to drive security projects from concept through completion
6. Research emerging cloud security trends and present improvement proposals and strategic recommendations to leadership
7. Make design change recommendations for improvements to the multi-cloud environments and associated services and configurations
8. Contribute to setting and improving cloud security standards
9. Serve as subject matter expert on platform and architecture security across cloud environments

Additional Characteristics

• Understanding of containerization and orchestration (Docker, Kubernetes, ECS, GKE, AKS, etc.)
• Experience with infrastructure-as-code and policy-as-code (Terraform, CloudFormation, OPA, etc.)
• Understanding of NIST, CIS Benchmarks, and ISO 27001 controls
• Understanding of business impact and critical needs for IT services
• Ability to manage tasks independently and escalate as necessary
• Strong attention to detail
• Desire to learn security best practices and promote security throughout the organization