Cloud Security Engineer

Role Purpose
The Cloud Security Engineer demonstrates a high level of professionalism, leveraging in-depth knowledge in cloud security and a basic understanding of related cybersecurity disciplines to adapt departmental plans and recommend optimal solutions and best practices within the Cyber Security Engineering & Automation department.
This individual contributor role manages cloud security projects and processes independently with limited supervision, allowing for tactical choices within established functional policies and broad procedures to achieve security goals.
They are responsible for the execution of main cloud security activities to achieve important security outcomes, actively participating in small to medium-sized projects of moderate complexity and contributing to process improvements.
The Engineer performs a variety of complex tasks, requiring detailed analysis to understand problems and supporting the delivery of solutions to intricate cloud security challenges where clear precedents may not exist.
Main Accountabilities
Design, implement, and maintain security controls across cloud platforms (IaaS, PaaS, and SaaS).
Define and enforce cloud security standards, guardrails, and reference architectures.
Secure cloud networking, identity, access management, and data protection services.
Implement and manage cloud security tooling such as CSPM, CWPP, CIEM, and WAF solutions.
Partner with cloud engineering and application teams to embed security into CI/CD and IaC pipelines (DevSecOps).
Conduct cloud security risk assessments, architecture reviews, and threat modeling.
Monitor cloud environments for misconfigurations, vulnerabilities, and security events, coordinating response with global SOC and IR teams.
Support regulatory, audit, and compliance requirements and global security standards.
Provide regional cloud security expertise and support global cloud security initiatives.
Knowledge & Skills
In-depth knowledge of cloud security principles, architectures, and best practices across major cloud providers (e.g., AWS, Azure, GCP).
Experience with cloud security tools and technologies (e.g., CASB, CSPM, CIEM, WAF).
Proficiency in scripting/automation for cloud environments (e.g., Python, PowerShell, Terraform, CloudFormation).
Strong understanding of network security, identity and access management, data protection, and compliance in cloud contexts.
Ability to perform complex analysis and support the delivery of solutions to intricate cloud security problems.
Excellent communication skills, capable of providing leadership and guidance to technical teams and stakeholders.
Education & Experience
Bachelor's degree in Information Security, Computer Science, Engineering, or a related field.
5+ years of experience in cybersecurity engineering with strong focus on cloud security.
Hands‐on experience securing major cloud platforms (GCP, Azure, and/or AWS).
Strong knowledge of cloud identity, networking, encryption, logging, and monitoring services.
Experience with infrastructure‐as‐code (Terraform, ARM, Cloud Deployment Manager, or similar).
Understanding of cloud threat models and security frameworks (NIST, CSA, MITRE).
#J-*-Ljbffr