Senior Cloud Security Engineer

Senior Cloud Security Engineer
Anywhere, US (100% Remote)
Long-Term Contract

Job Description:
We are seeking a senior-level Cloud Security Engineer for our client to support their Cloud Security group who will be brought in to ensure proper configuration standards are met and sustained in compliance with security policy, procedures, standards, and industry requirements/best practices. This Senior Cloud Security Engineer will help the organization in implementing and maintaining security controls including CSPM, CWP, CASB, next-generation firewalls, Container security, and Automated Compliance Tools.

This person will be performing cyber security monitoring for our client's cloud environments, ensuring proper monitoring coverage that correlates with internal security operations and processes. To be successful in this role, you should have a proven understanding of the CSA Cloud Controls Matrix as well as other security standards and regulations such as:  NIST, ISO, PCI.  You will also want to have a deep understanding of cloud platforms such as Amazon Web Services (AWS), Microsoft Azure. 

Duties & Responsibilities: - Implement, monitor, and support security software/systems that will help ensure compliance with CSA Cloud Controls Matrix in cloud environment - Make recommendations to management on enhancements to existing and new security software or related tools - Assist in evaluating, planning, and implementing new/existing security applications/tools that integrate with current tool sets - Help implement and maintain next-generation enterprise control tools and detection technologies - Ensure security standard methodologies are identified and integrated into all facets of projects including network, system designs/configuration, and implementations - Identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks - Partner with various business units to enhance security policies/procedures - Create and maintain security documentation, policies, and procedures - Direct hands-on experience designing and implementing security with AWS for both IaaS and PaaS offerings

Required Experience & Qualifications: - Bachelor's degree in Computer Science, Mathematics, Physics, Computer Information Systems, Cyber Security, and/or equivalent work experience required - Minimum of Five (5) years of enterprise cloud (IaaS, PaaS, SaaS) experience, IT cloud security experience preferred - Cloud certifications, such as: - CCSP, AWS CSA, and Microsoft's Azure Solutions Architect are preferred - Experience with cloud security posture management (CSPM) and cloud workload protection (CWP) tools, such as Microsoft Defender for Cloud, and AWS Security Hub / Config. - In-depth understanding of Azure Policy and/or AWS Service Control Policies - Deep knowledge in and around cloud networking, specifically within areas like: - Routing, Traffic filtering (firewalls), Load Balancing, etc - Experience with Cloud-hosted (cloud-based) Container security. - Experience with DevOps and CI/CD tooling (ex: Jenkins)  - Experience in Hardening AWS/Azure Services. - Strong ability to think critically and solve problems in creative ways. Thinks outside the box - Develop a cloud security strategy with a focus on compliance to adhere to our clients' internal/external policies/standards - Advise stakeholders and translate business requirements into secure, scalable, and reliable cloud solutions - Complete hardening guideline reviews and assessments with developers, operations, and infrastructure teams - Partner with system engineering / DevOps to assess and reduce cloud security risks. - Assist with documentation of organizational cloud security standards, processes, and governance model - Knowledgeable with CSA CCM security framework and CIS Benchmarks for Cloud - Knowledge of host hardening, auditing, logging, monitoring, network security, and anomaly detection - Understanding of industry trends for cyber security risk & threat intelligence, and governance - Assist with the implementation and improvements of Cloud Security operational capabilities within our client's existing organizational support structure