Cloud Security Engineer

Overview

POSITION OVERVIEW

Fidelity National Financial (FNF) is looking for a skilled Cloud Security Engineer with a focus on deploying and maintaining our Cloud-Native Protection Platform (CNAPP). The ideal candidate will have extensive experience implementing and using Prisma Cloud. This role requires a deep understanding of cloud security practices, infrastructure maintenance, and server management to ensure the highest level of security across our cloud environments.

LOCATION

• This role can sit 100% remote.

DUTIES & RESPONSIBILITIES

• Assist with the deployment, configuration, and management of Prisma Cloud to monitor cloud environments for misconfigurations and compliance risks
• Develop and maintain configuration policies aligned with industry standards such as NIST, CIS, and ISO 27001
• Continuously refine rules and alerts to reduce noise and prioritize critical vulnerabilities
• Conduct in-depth assessments of cloud configurations (AWS, Azure, GCP) to identify and remediate security risks
• Collaborate with DevOps and Cloud Engineering teams to implement automated remediation workflows using Infrastructure as Code (IaC) and CI/CD pipelines
• Provide subject matter expertise on cloud security architecture, including identity and access management (IAM), data protection, and workload security
• Ensure cloud environments adhere to regulatory, compliance & Cyber frameworks
• Work with compliance teams to support audits and provide evidence of cloud security controls
• Develop dashboards and reports for leadership to measure cloud security effectiveness and trends
• Leverage tooling insights to identify emerging threats and vulnerabilities in cloud environments
• Collaborate with SOC teams to enhance cloud threat detection and incident response capabilities
• Implement automated guardrails to prevent security drift and enforce least privilege principles

MINIMUM REQUIREMENTS

• Bachelor’s degree in computer science, Cybersecurity, or a related field, or equivalent work experience
• Requires 3+ years of experience in various security and technology domains
• Proficiency in CNAPP tools such as Prisma Cloud, Wiz, Orca, Check Point CloudGuard, or similar
• Strong understanding of cloud security frameworks and standards (CIS, NIST, CSA, MITRE ATT&CK)
• Experience with cloud-native security controls (IAM, KMS, VPC security, encryption, logging, and monitoring)
• Excellent problem-solving skills and attention to detail
• Strong communication skills to effectively convey complex technical information to non-technical stakeholders

PREFERRED EXPERIENCE

• Experience with Container technologies tooling (Docker, Kubernetes, Helm, etc.)
• Knowledge of scripting and automation for security tasks (e.g., Python, PowerShell)
• Continuous integration and delivery tooling experience (CI/CD)
• Current relevant security certifications (e.g., OSCP, CEH, CISSP)

This position has the potential to earn compensation in the range of $135,000 - $180,000 annually based on location and job-related factors such as skillset and experience. Actual rate may vary within the range provided, depending on a number of factors, including skillset, experience and location.  The base compensation is one component of the total rewards package offered to our employees, including optional health and welfare insurance (medical/dental/vision/life/disability); paid holidays, vacation, and sick time off; and matching 401(k) plan and matching employee stock purchase plan.