Cloud Security Engineer

Job Description:

As a Cloud Security Engineer, you will be responsible for ensuring the security and compliance of our cloud infrastructure. You will work closely with cross-functional teams to design, implement, and manage cloud security posture management (CSPM) and cloud-native application protection platform (CNAPP) solutions.

Key Responsibilities:

• Design, implement, and manage CSPM and CNAPP solutions for multi-cloud (AWS, Azure, GCP) IaaS/PaaS environments.

• Conduct security assessments and audits of cloud infrastructure to identify vulnerabilities and ensure compliance with industry standards and regulations.

• Develop and maintain security policies, procedures, and best practices for cloud environments.

• Collaborate with DevOps and development teams to integrate security into the CI/CD pipeline.

• Monitor and respond to security incidents and alerts in cloud environments.

• Provide guidance and support to other teams on cloud security best practices.

• Stay up to date with the latest cloud security trends, threats, and technologies.

• Provide detailed reports on security posture and compliance status.

• Respond to security incidents and breaches in cloud environments.

• Conduct root cause analysis and implement measures to prevent future incidents.

Qualifications:

• Bachelor’s degree in computer science, Information Technology, or a related field.

• 5+ years of experience in cloud security, with a focus on IaaS/PaaS environments.

• Strong knowledge of CSPM and CNAPP tools and technologies.

• Experience with cloud platforms such as AWS, Azure, and/or GCP.

• Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CIS).

• Proficiency in scripting and automation (e.g., Python, PowerShell, IaC (Terraform)).

• Excellent problem-solving and analytical skills.

• Strong communication and collaboration skills.

Preferred Qualifications:

• Relevant certifications (e.g., AWS Certified Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer, CCSP).

• Experience with container security and Kubernetes.

• Knowledge of DevSecOps practices and tools.