Cloud Security Engineer

Overview

As a Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, and monitoring secure cloud architectures for cloud migration, cloud optimization and cloud deployment. We are looking for candidates with experience with cloud platform services, cybersecurity and DevOps practices such as infrastructure as code and confirmation management automation.

Contributions: Responsibilities include:

• Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy.
• Understand the needs of stakeholders and optimize solutions that marry security with usability.
• Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate.
• Examine infrastructure as code written by others and analyzing risk.
• Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.).
• Identify technical problems, perform root cause analysis, and develop updates and ‘fixes’.
• Automate security processes such as vulnerability management and patch management.
• Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended.
• Support enterprise cloud security through infrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing.
• Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit.
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations.
• Iden