Cloud Security Engineer - Infrastructure - AWS

Accountabilities

• CloudSecurityEngineering:Design,implement,andmaintainAWSsecuritycontrolscoveringidentityandaccessmanagement,networking,encryption,monitoring,andcloud-nativeservices.Applyleast-privilegeprinciplesandestablishsecureconfigurationsacrossproductionenvironments.

• InfrastructureandPlatformSecurity:Partnerwithinfrastructure,platform,SRE,DevOps,andapplicationteamstointegratesecurityintoenterpriseplatforms.Definesecurebaselines,hardeningstandards,reusableguardrails,andpreventativecontrolstostrengtheninfrastructureresilience.

• Infrastructure-as-CodeandDevSecOps:DevelopandmaintainsecuritycontrolsusingTerraform,CloudFormation,reusablemodules,andtemplates.Integrateautomatedpolicyenforcement,vulnerabilityscanning,configurationvalidation,andcompliancechecksintoCI/CDpipelines.

• CloudMonitoringandIncidentResponse:Improvethecollection,protection,andcentralizationofcloudsecuritytelemetry.CollaboratewithSecurityOperationsteamstoinvestigateincidents,strengthenthreatdetection,anddevelopautomatedremediationcapabilities.

• SecurityArchitectureandRiskManagement:Conductarchitecturereviews,identifyvulnerabilities,andtranslateriskassessmentsintopracticaltechnicalsafeguards.Developreferencearchitectures,securitypatterns,engineeringstandards,andimplementationguidance.

• AutomationandContinuousImprovement:Usescriptingandautomationtostreamlinesecurityoperations,reducemanualintervention,andimprovecontroleffectiveness.Investigatecomplextechnicalissuesandimplementsustainablesolutionsacrosscloudandinfrastructureenvironments.

• Cross-FunctionalCollaboration:Communicatesecurityrisks,businessimplications,andremediationrecommendationstoengineers,architects,securityspecialists,andtechnologyleaders.Managemultipletechnicaldeliverablesindependentlywhilecontributingtosharedsecurityobjectives.

Requirements

• EducationandExperience:Bachelor'sdegreeinatechnicaldisciplineorequivalentprofessionalexperience,withatleasteightyearsofrelevantindustryexperience.Candidatesshouldhavesevenormoreyearsofdirectexperienceincloudsecurityengineering,applicationorproductsecurity,oracomparablediscipline,alongsideatleastfiveyearsincloudengineering,infrastructureengineering,DevSecOps,SRE,orrelatedtechnicalfields.

• AWSSecurityExpertise:Extensivehands-onexperiencesecuringproductionAWSenvironments,includingIAMpolicies,roles,trustrelationships,permissionboundaries,identityfederation,cross-accountaccess,andleast-privilegedesign.

• CloudNetworking:StrongunderstandingofAWSnetworkingandcorenetworksecurityconcepts,includingVPCs,subnets,routing,securitygroups,networkACLs,VPCendpoints,loadbalancers,DNS,TCP/IP,TLS,firewalls,proxies,andnetworksegmentation.

• AWSSecurityServices:PracticalexperiencewithtoolssuchasCloudTrail,AWSConfig,GuardDuty,SecurityHub,Inspector,IAMAccessAnalyzer,KeyManagementService(KMS),andSecretsManager.

• InfrastructureEngineeringandAutomation:DemonstratedproficiencywithInfrastructure-as-CodetechnologiessuchasTerraformorCloudFormation,Git-baseddevelopment,CI/CDworkflows,andscriptinglanguagesincludingPython,PowerShell,orBash.

• ContainersandOperatingSystems:ExperiencesecuringKubernetesandcontainerizedenvironments,includingAmazonEKSorcomparablemanagedKubernetesplatforms,alongsideworkingknowledgeofLinuxandcommoninfrastructuretechnologies.

• ThreatDetectionandRiskManagement:Understandingofcloudattacktechniques,identity-basedattacks,privilegeescalation,credentialcompromise,infrastructurevulnerabilities,encryption,keymanagement,compliance,andsecurityriskmanagement.

• TechnicalLeadershipandProblem-Solving:Abilitytotroubleshootcomplexinfrastructureandsecurityissuesindependently,evaluaterisks,prioritizeremediation,andmanagemultipledeliverablesinafast-pacedenvironment.

• CommunicationandCollaboration:Strongwrittenandverbalcommunicationskills,soundanalyticaljudgment,andtheabilitytoworkeffectivelywithtechnicalteamsandseniorstakeholders.

• PreferredQualifications:RelevantsecuritycertificationssuchasCISSP,CEH,GIAC,ISSAP,orCISMareadvantageous.Experienceataseniortechnicalorequivalentleadershiplevelisalsovalued.

Benefits

• Salary:Annualbasesalaryrangingfrom$135,000to$180,000,dependingonqualifications,relevantexperience,skills,geographiclocation,andmarketconditions.

• BonusOpportunities:Potentialeligibilityforadiscretionarybonus,subjecttoapplicableprogramguidelines,positioneligibility,andmanagementapproval.

• RemoteWork:Fullyremoteposition,offeringflexibilitytoworkfromalocationwithintheUnitedStates.

• HealthcareCoverage:Accesstomedical,dental,andvisioninsuranceplans.

• FinancialProtection:Lifeinsuranceanddisabilityinsurancebenefits.

• RetirementPlanning:Eligibilitytoparticipateina401(k)retirementsavingsplan.

• PaidTimeOff:Paidvacationandholidays,subjecttotheapplicablecompanypolicies.

• ProfessionalGrowth:Opportunitiestoworkwithmoderncloudtechnologies,strengthenenterprisesecuritycapabilities,andcollaboratewithexperiencedprofessionalsacrossengineeringandsecuritydisciplines.

• InclusiveWorkplace:Equalemploymentopportunities,withconsiderationbasedonrelevantqualificationsandexperience.