Cloud Security Engineer

The Cloud Security Engineer is an individual with solid hands-on technical understanding of enterprise security solutions, cloud infrastructure and services platforms (AWS & Azure), latest security regulations, security best practices and security threats. This position builds, maintains and administers enterprise cloud security solutions, such as CSPM, DLP, vulnerability management, as well as enforcing security policies to control access to systems and applications. The person assists the security team in improving the security measures, maintaining and enforcing security policies, and ensuring compliance. In addition, the individual needs to have solid understanding of IT infrastructure, networking, application design, big data, databases, and IT/healthcare/privacy regulations. As a Cloud Security Engineer, the person will be accountable for having detailed and up-to-date knowledge in a broad range of cloud security disciplines, regulations and compliance, and security threats to help educate and drive the implementation and standardization of the organization’s enterprise security program.

• Leverage your deep understanding of AWS and Azure security to continuously monitor, manage and improve our cloud security posture
• Continuously build, manage and monitor Cloud Security Posture Management
• Further develop and enhance our company-wide DLP solution
• Collaborate cross-functionally to develop and implement appropriate cloud security controls
• Orchestration for security posture checks, design and implement cloud security infrastructure at scale, develop and perform cloud security risk assessments and system hardening
• Technical SME for Cloud Security related efforts, remediation and mentorship, including but not limited to providing assistance and guidelines to our SOC  
• Assisting in designing, testing, and executing the company’s security incident response and BC/DR plans
• Review and provide security and compliance recommendations to appropriate IT and Dev projects to ensure that security concerns are addressed throughout the project(s) life cycle(s)
• Participate in internal security audits and risk analysis to identify weaknesses, assess the effectiveness of existing controls, and recommend remedial actions
• Research and maintain effective knowledge of emerging technologies and provide guidance to management for strategic planning
• Stay current and up to date with latest security news, threats, and applicable regulations. Protect the internal and external environments and the organization’s global network against emerging threats and risks
• Respond to internal users’ security questions/concerns, external audit requests, customers’ assessments, and appropriate compliance requirements
• Write technical reports as needed to communicate applicable security incidents and/or potential risks
• Work individually and in a team environment. Multitask and use time efficiently to meet project/task deadlines in a fast-paced environment
• Other duties as assigned

• University degree in Information Security, Computer Science, Computer Engineering, Information Technology (or equivalent of education and work experience)
• Minimum of 4-5 years of experience in Information Security, and/or IT Security
• One or more of the following certifications: CISSP, CCSP, CCSK
• Demonstrated technical skills in enterprise security and networking protocols
• Technical expertise in cloud infrastructure and services platforms (AWS and Azure preferred)
• Demonstrated technical skills in cloud security, including but not limited to CSPM, CASB, DLP, IAM, and vulnerability management
• Familiarity with DevOps toolchain (e.g. Terraform, Jenkins)
• Knowledge of cybersecurity frameworks and relevant regulatory requirements
• Technical understanding of IP networking, data centers, and disaster recovery
• Technical understanding of systems, applications, and databases
• Excellent communication skills at all organizational levels
• Strong project management and time management skills
• High level of personal integrity and ability to professionally handle confidential matters
• Capable of acting calmly and managing incidents under high pressure and stress
• Capable of multitasking in a fast paced, multifaceted environment
• Ability to work well with customers, peers, and management
• Proficient with the Microsoft Office Suite, Visio, and SharePoint

Preferred Education Experience, Skills and Abilities:

• Bachelor’s degree in Information Security, Computer Science, Computer Engineering, Information Technology (or equivalent of education and work experience)
• 5-7 years of experience in Information Security, and/or IT Security
• AWS Cloud Security and/or Microsoft Azure Security certifications are a plus
• Demonstrated technical experience in Microsoft Purview, CrowdStrike CSPM, and Qualys are a plus
• Demonstrated experience and knowledge of relevant regulatory and security framework requirements, such as The U.S. Health Insurance Portability and Accountability Act (HIPAA) and NIST 800 and ISO/IEC 27001/27002
• Previous working experience in healthcare technology environments