Information security serp_jobs.h1.location_city

Job Description

Job Description

Overview

Cloud Security Engineers are responsible for the secure operations of cloud infrastructure, platforms, and software, including the installation, maintenance, and improvement of cloud computing environments. They also help develop new designs and security strategies across cloud-based and hybrid applications, infrastructure, platforms, and SaaS.

Leads the analysis, implementation, execution, and improvement of proactive security controls to prevent external threat actors from infiltrating company information or systems. Conducts research and provides leadership updates regarding advanced attempts / efforts to compromise security protocols. Maintains and reviews security systems while assessing security policies that control access to systems. Provides status updates and recommendations to the leadership team regarding the impact of theft, destruction, alteration, or denial of access to information. Follows standard practices and procedures in analyzing situations or data.

This position reports to the Director of Information Security.

Responsibilities

The primary duties and responsibilities of the Cloud Security Engineer are :

• Assessing Existing Infrastructure and Identifying Threats.
• Providing recommendations on New Infrastructure and Threat Modeling to assist in stakeholder decisions.
• Developing, solutioning, operating, maintaining, and supporting a secure cloud environment with technologies including but not limited to : Servers, Storage, Network services, Enterprise applications, Cloud platform support, Automation, CI / CD, Managing cryptography and encryption, IAM, Threat Detection, Logging, PKI, SaaS, and PaaS.
• Monitoring for and responding to incidents in cloud environments.
• Keeping cloud infrastructure current, making recommendations, and continually improving cloud security technologies.
• Analyzing, designing, and developing programs, shell scripts, tests, and infrastructure automation capabilities.
• Develop security standards in partnership with Engineering, Infrastructure Services, and Application Development.
• Representing the cloud security team in change control activities and ensure proposed changes are in alignment with security best practices.
• Staying abreast with security standards and emerging vulnerabilities / threats to proactively resolve / remediate / mitigate.
• Engage in digital forensics to investigate breaches or security incidents in the cloud.
• Collaborate with Disaster Recovery and Business Continuity Teams and play a pivotal role in developing, testing, and refining disaster recovery plans tailored for cloud environments.
• Empower the Security Compliance and Data Protection Team to audit cloud environments to ensure compliance and pinpoint areas of improvement. Using metrics and KPIs to drive and further Security Posture Initiatives.
• Establish and maintain a feedback mechanism where security measures are not only implemented but also refined based on feedback to enhance security protocols continuously.
• Performing other security team relevant duties and responsibilities as assigned.
• Participate in incident response activities as assigned.

Preferred Experience

Skills Required

Qualifications

Experience / Education / Certifications

#IndeedSHRSS

#LI-Hybrid

#zipcorpor