We are seeking a Senior/Lead Cloud Security Engineer to strengthen our cloud security posture and ensure compliance across multi-cloud environments. In this role, you will collaborate with cross-functional teams to design governance policies, manage security incidents, and drive automation initiatives that safeguard our cloud infrastructure.
Responsibilities
- Assist in the design and implementation of policies and guardrails to make the cloud environment compliant with the control framework
- Coordinate with internal teams to gather requirements and translate them into actual implementations
- Track open vulnerabilities and perform remediations in coordination with respective stakeholders
- Handle cloud security operations incidents and alerts, ensuring timely response and resolution
- Support cloud security operations in reviewing alerts and incidents and driving them toward remediation
- Ensure that cloud resources are provisioned and operated according to the client's security standards
- Recommend preventive and reactive controls that can be implemented to secure the environment
- Support the creation of security dashboards and reports for cloud security operations
- Develop pipelines and Lambda functions using Python for security automation
- Automate security tasks and build scripts and bots to streamline operations
Requirements
- 6-10 years of experience in cybersecurity or security operations center roles
- Understanding of cloud infrastructure, cloud security and compliance
- Proficiency in CSPM tools
- Background in public cloud infrastructure management
- Expertise in incident management and vulnerability management
- AWS Cloud Security certification, AZ-500 (Azure Security Engineer) or CCSK, CCSP
- Knowledge of cybersecurity concepts
- Skills in Python scripting for developing pipelines and Lambda functions
- Capability to automate security tasks and build scripts and bots to streamline operations
- Proven track record of working with multinational teams
- Good presentation and communication skills, both written and spoken
Nice to have
- Familiarity with compliance standards and frameworks such as PCI-DSS, ISO 27001 and NIST 800-37
- Understanding of both AWS and Azure public cloud platforms
