Description

This position will follow our hybrid work model, we expect the selected candidate to be in office 2-3 days a week at one of the following office locations: St. Petersburg, FL, Southfield, MI, Denver, CO

Job Summary:

As the Cloud Security Engineer, you will be responsible for the analysis, design, development, implementation and maintenance of cloud security controls, and work with operational teams and specialists to maintain our cloud security posture. The candidate must be a self-motivated individual who can collaborate with a team and across the organization.

Essential Duties and Responsibilities:

• Evaluate events and alerts within the cloud-native protection platform, and platform, and metric observability platform, and tune alerts based on environment and compensating controls

• Manage the lifecycle for all security threats, vulnerabilities, and remediations associated with cloud workloads.

• Partner with the security teams to design, test, implement, and maintain security controls that align with our security policies.

• Work effectively across security, engineering, and architecture functions within the organization to affect change and enhance security strategies

• Review IaaS / PaaS / SaaS architecture roadmaps for the cloud to and recommend baseline security controls and hardening requirements.

• Recommend security guardrails to protect workloads within the cloud while maintaining deployment agility.

• Troubleshooting, problem solving different cloud providers, knows at least one scripting language, can write code and/or scripts, ability and wants to learn different scripting languages to solve problems (examples, PowerShell, Java, Python, Terraform)

• Identify methods to implement or modify security solutions to better protect the enterprise from cyber threats

• Proactively explore emerging technologies and their potential impact on security teams, from the perspective of securing and protecting those technologies

• Recommend and coordinate security strategies across teams, influencing senior leadership

• Contributes to a culture of innovation, collaboration, and continuous improvement.

• Communicates blockers and delays before they require escalation.

Qualifications

Skills and Experience:

• Minimum of a Bachelor’s degree in Computer Science, MIS or related degree and five (5) years of relevant experience or combination or education, experience and training

• Minimum 4 years of AWS experience

• Experience writing in multiple coding languages (e.g., Python, Go, Bash, etc.)

• Experience with Infrastructure as Code (e.g., CDK, Cloud Formation, Terraform, etc.)

• Experience with Git based source code management tools

• Experience with Agile / Scrum planning tools (GitHub, Azure DevOps, Jira, etc.)

• Experience with Splunk (creation of alerts and dashboards, and comprehensive querying logic)

• Experience with AWS security services: CloudWatch, Security Hub, KMS, Inspector, Guard Duty, Config, CloudTrail.

• Experience with Cloud Security Posture Management (CSPM) tools such as AquaSec, Wiz, Palo Alto Prisma, etc.

• Experience with on-premises and cloud-based networking, firewalls, and network security.

• Experience with working in a DevSecOps environment.

• Preferred certifications: AWS Solution Architect Associate, AWS Certified Security – Specialty, CISSP, CCSP (certified cloud security specialist), Splunk Certified Power User

• Demonstrated engagement in security conferences, training, learning, associations are highly desired and fully supported.

• Self-starter, technology and security hobbyist, enthusiast.

• Lifelong learner with endless curiosity.

Licenses/Certifications:

• AWS Certifications preferred but not required

Job: Technology

Primary Location: US-FL-St. Petersburg-Saint Petersburg

Other Locations: US-MI-Southfield-Southfield, US-CO-Denver-Denver

Organization Technology

Schedule Full-time

Job Shift Day Job

Travel Yes, 5 % of the Time

Req ID: 2402573