Lead Cloud Security Engineer position will work collaboratively with the software engineering teams, infrastructure, and security teams to create and maintain the partner program-specific security/audit compliance requirements. The position will play a key role as part of the Security and Governance team implementing AWS Well Architect Framework’s pillars and design principles and best practices.

The position plays a key role in designing, developing, and implementing security automation needs. As the Security Orchestration and Automation Engineer, the position will be responsible for developing system integrations and automating processes to streamline security operations and audit compliance.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed above are representative of the knowledge, skill, and ability required.

Duties and Responsibilities:

• Designing and implementing security architecture: You would be responsible for designing and implementing secure cloud architectures and frameworks. This involves assessing and selecting. appropriate security solutions, technologies, and tools for cloud environments.
• Cloud security strategy: You would develop and maintain a comprehensive cloud security strategy that aligns with the organization's overall security goals and objectives. This includes defining security policies, standards, and procedures specific to cloud environments.
• Risk assessment and management: You would conduct risk assessments and identify potential security vulnerabilities and threats in cloud-based systems. You would develop risk mitigation strategies and work with stakeholders to prioritize and address security risks.
• Security compliance: You would ensure that cloud environments comply with relevant security standards, regulations, and industry best practices. This may involve implementing security controls, monitoring compliance, and conducting audits and assessments.
• Incident response and management: You would develop and implement incident response plans and procedures for cloud security incidents. This includes investigating security breaches, coordinating response efforts, and conducting post-incident analysis to prevent future incidents.
• Security monitoring and threat intelligence: You would establish and maintain security monitoring systems and processes to detect and respond to security events and incidents in cloud environments. You would also stay updated on the latest threats and vulnerabilities through threat intelligence sources.

Experience and/or Education Qualification: 

• Bachelor’s degree in Programming/Systems or Computer Science or equivalent experience.
• Overall, 8-12years of Security experience in relevant to Cloud Security domain.
• Cloud security expertise: Strong knowledge and experience in cloud security is essential. This includes familiarity with cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP), as well as understanding of cloud-specific security controls, technologies, and best practices.
•  Security engineering and architecture: Experience in security engineering and architecture is important, as you will be responsible for designing and implementing secure cloud architectures. This includes knowledge of security frameworks, secure network design, access control, encryption, and identity and access management (IAM) in cloud environments.
• Security certifications: Professional certifications in cloud security can demonstrate your expertise and dedication to the field. Certifications such as Certified Cloud Security Professional (CCSP), AWS Certified Security - Specialty, or Certified Information Systems Security Professional (CISSP) can be valuable credentials.
• Risk management and compliance: Experience in risk assessment, management, and compliance is beneficial. This includes understanding of security risk assessment methodologies, compliance frameworks (such as GDPR or HIPAA), and the ability to develop and implement risk mitigation strategies.
• Incident response and security monitoring: Hands-on experience in incident response and security monitoring is valuable. Familiarity with security information and event management (SIEM) tools, intrusion detection and prevention systems (IDPS), and experience in investigating and responding to security incidents in cloud environments is important.

Additional Preferred Skills

• Experience with Continuous Compliance tools such as CloudCheckr, Cloud Conformity or any similar multi-cloud management tool
• Cloud Security Specialist certification, CEH , CCSP etc