Cloud Security Engineer

Responsibilities:

1. Security Architecture and System Design:
• Design and implement robust cloud security frameworks across multiple environments to protect company data and infrastructure.
• Develop secure cloud architectures and solutions tailored to business needs and regulatory requirements.

Security Monitoring and Incident Response:

• • Monitor cloud environments for security incidents and vulnerabilities using various tools and services.
  • Lead the response to security breaches and other cybersecurity incidents and provide a thorough post-event analysis to prevent future risks.

Compliance and Risk Management:

• Ensure all cloud platforms comply with industry standards and regulations such as SOC 2, GDPR, HIPAA, and PCI DSS.

• Conduct regular security audits and risk assessments and recommend improvements to enhance security.

Identity and Access Management:

• Manage and configure identity and access management (IAM) systems to ensure proper access controls for all cloud services.
• Implement and maintain authentication protocols, authorization mechanisms, and security policies for cloud-based applications.

Automation and Infrastructure as Code (IaC):

• • Utilize automation tools like Terraform to deploy secure infrastructures systematically.
  • :Implement security as code to integrate security measures seamlessly into CI/CD pipelines.

Collaboration and Advisory

• • Work closely with IT and development teams to integrate security controls into the DevOps and CI/CD pipelines.
  • Advise and train team members on cloud security best practices, tools, and processes.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Minimum of 5 years of experience in a cloud security role, with proven expertise in designing and maintaining secure cloud environments on AWS, GCP, or Azure.
• Strong understanding of cloud computing technologies and workload transition challenges.
• Familiarity with security standards and frameworks (e.g., NIST, ISO 27001).
• Knowledge of cloud service provider technologies and tools for securing cloud environments.
• Excellent problem-solving skills and the ability to think analytically.
• Strong communication skills and the ability to work collaboratively across various departments.