Senior Security Engineer

Job Details

Roles & Responsibilities

The Senior Cloud Security Engineer is responsible for coding, configuring and administering cloud information security systems. This role is expected to champion processes and technology as a subject matter contributor and researcher in various cloud infrastructure and system technical areas. The Senior Cloud Security Engineer works closely with teams in other Information Security disciplines, infrastructure, and operations areas to help provide superior protection. This role serves as a cloud security practitioner that builds and operates information security controls, specific to cloud processing platforms. Senior Cloud Security Engineers identify threats to cloud systems, develop new features to meet security needs and build, maintain, upgrade and continuously improve cloud-based systems. The Senior Cloud Security Engineer does everything from planning and architecting secure cloud system requirements to constructing, validating and deploying the system to monitoring and detecting malicious activity once the system is deployed. Additionally, this role identifies and recommends/remediates security gaps on the platform and infrastructure.

Job Description

Summary:

The Senior Cloud Security Engineer is responsible for coding, configuring and administering cloud information security systems. This role is expected to champion processes and technology as a subject matter contributor and researcher in various cloud infrastructure and system technical areas. The Senior Cloud Security Engineer works closely with teams in other Information Security disciplines, infrastructure, and operations areas to help provide superior protection. Senior Cloud Security Engineers identify threats to cloud systems, develop new features to meet security needs and build, maintain, upgrade and continuously improve cloud-based systems. The Senior Cloud Security Engineer does everything from planning and architecting secure cloud system requirements to constructing, validating and deploying the system to monitoring and detecting malicious activity once the system is deployed. Additionally, this role identifies and recommends/remediates security gaps on the platform and infrastructure.

Minimum Qualifications:

• Bachelor's degree in computer science, networking or information technology

• Years of Work Experience Required : 5+ years

• Type / focus of work experience required: Experience in Information Security or Infrastructure, with large scale platforms (cloud technologies), complex inter-dependent technologies, data centers, AWS, internal software systems and tools e.g. AWS Security Hub, Prisma, Jenkins, etc.

Knowledge, Skills and Abilities:

• Networking, LDAP directories, vulnerability/patch management, encryption and key management, web application firewall (WAF), network access control (NAC) and privileged access management (PAM).

• Change management, Incident management, server and desktop management and access management.

• Cloud architecture and computing and software application general computing controls.

• Business continuity/disaster recovery.

• Systems development lifecycle and project management methodologies, specifically Agile/Scrum.

• Working knowledge of web services, API, REST, RPC and how to properly secure them in conjunction with experience and practical application of cloud security controls based on industry frameworks e.g. Cloud Security Alliance.

• Knowledge of overall Microsoft Office 365 security including knowledge of azure active directory, azure information protection, information rights management, single sign-on and multi-factor authentication and related technologies (including Microsoft Enterprise Mobility + Security