Cloud Security Engineer | Full-Time/Remote

Position: Cloud Security Engineer

Job Type: Full Time (Remote)

Project: One of the Fortune 500's

Responsibilities

Monitor, evaluate, and maintain systems and procedures to safeguard infrastructure, databases, and Web-based security.

Identify, integrate, monitor and improve InfoSec controls by understanding business processes. Assist in defining security requirements and review of system to determine if they have been designed to comply with established security standards. Help in developing new standards as necessary.

Conduct vulnerability assessments and monitor systems for potential security concerns. Design and configure infrastructure systems to help mitigate findings and improve security posture.

Assist with security architecture reviews and conduct threat modeling exercise as new products and features are rolled out.

Research security trends, new methods, and techniques used in unauthorized access of data in order to preemptively eliminate the possibility of system breach.

Respond to alerts from information security tools and triage and analyze potential security issues.

Troubleshoot security system and related issues.

Collaborate and maintain relationships with various engineering teams across the organization to communicate and remediate security issues in a timely manner.

Educate engineering teams on security best practices and promote security by design.

Ensure compliance with regulations and privacy laws.

Skills Necessary

Working experience in security or a related field of at least 4-6 years.

Good knowledge of one or more programming languages, such as Python/Ruby/React, etc.

Secure coding or programming expertise of at least two years.

Proven abilities in collaboration with engineering teams and strong communication skills.

Be well-versed on typical infrastructure security weaknesses.

Proven proficiency in the area of infrastructure security.

Knowledge of CI-CD and SDLC in relation to infrastructure security.

Working knowledge of every phase of the infrastructure lifecycle.

Effective in informing key stakeholders of security vulnerabilities.

AWS Certified Security Specialty certifications for cloud security are preferred.