Job description 

About the Role :

Design secure cloud architectures for various deployment models, ensuring seamless integration with existing systems 

Provide technical support and advice to other Security Engineering teams on troubleshooting and resolving cloud security challenges 

Partnership with ISRM Cyber Defense organization on cloud native tooling to support Incident Response and Data Loss Prevention processes 

Implement robust identity and access management (IAM) policies to control access to cloud resources 

Monitor the cloud environment for security threats and vulnerabilities, reporting incidents promptly 

Ensure data protection through encryption, tokenization, and other security measures 

Provide leadership and mentorship to junior security engineers, fostering a culture of continuous improvement and learning 

Be able to strategically plan, track, and manage multiple projects 

Stay abreast of the latest cloud security trends, threats, and technologies

Effectively communicate technical concepts to business lines and stakeholders 

About You : 

Bachelor’s degree preferred and/or 7+ years of relevant professional Information Technology / Information Security experience 

Strong technical expertise and 3-5 years of experience minimum in cloud platforms such as AWS, Azure, or Google Cloud Platform. 

Proven experience in designing and implementing security solutions in cloud environments. 

General scripting proficiency (i.e., Powershell, BASH, Python, Perl, etc…) 

Ability to work independently while driving projects to conclusion 

Strong oral and written communication skills with the ability to understand technology sufficiently to communicate the complexity in simple terms for key stakeholders clearly  

Ability to initiate new ideas, create action plans, implement projects, and carry efforts to completion; proven ability to lead through engagement with others; and capability to solve problems, resolve conflicts, and deal effectively with internal and external constituencies  

Attention to detail and accuracy 

Experience managing multiple projects and deadlines 

Strong Experience with Infrastructure as Code (IaC) 

Experience in SIEM technologies such as Splunk for real-time security monitoring, log management, incident response, and threat analysis of cloud service provider environments. 

Knowledge of FedRAMP requirements and controls 

Knowledge of legal and regulatory requirements related to information security and data privacy (e.g., GDPR, HIPAA) 

Experience with managing infrastructure within AWS and/or other public cloud environments  

Security certification(s) such as CISSP, CCSP, AWS Certified Security Specialty