Cloud Security Engineer

Team: Security

Location: Shenzhen

Commitment: Full-time Employee

Workplace Type: hybrid

Responsibilities

• Be responsible for designing, developing and operating cloud security technical solutions in accordance with relevant cloud security policies and standards, as well as cloud architecture standards and guidelines.
• Undertake security audits of the company's cloud environment, covering network, configuration, permissions, data, etc., identify security risks and promote their handling.
• Take charge of daily vulnerability management for cloud security.
• Be responsible for the construction of the container security system.
• Develop Key Rotation strategies and promote their implementation.
• Monitor the security status of cloud infrastructure, and cooperate with the technical team to respond to and investigate alerts emphasized by the SOC.

Requirements

• Familiar with various AWS services, including IAM, VPC, Security Group, NACL, LB, KMS, Secret Manager, etc.
• Proficient in using tools such as AWS Security Hub, GuardDuty, Inspector, Config, and IAM Access Analyzer to identify issues.
• Familiar with EKS security, such as Pod security policies.
• Skilled in using and operating container security tools like Falco and their rules.
• Familiar with cloud security technologies such as CSPM, CIEM, and CNAPP.
• Have experience in conducting cloud infrastructure risk assessments and vulnerability analysis.
• Have participated in emergency response to cloud security incidents.
• Possess excellent analytical thinking ability and problem - solving skills.
• Have effective time management and organizational abilities.