Cloud and Infrastructure Security Engineer II

What You'll Do:

• Assist in the development of secure Cloud Account Architectures, focusing primarily on AWS. 
• Design and implement network security strategies that leverage security groups, NACLS, routing domains, and multi-tiered subnet architectures to ensure a defense-in-depth approach. 
• Manage critical security logging and monitoring infrastructure for cloud-native and third-party data sources, ensuring their efficient shipping to Data Lakes and integration with visualization platforms. 
• Operate and manage Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP), such as Wiz, Orca, Prisma, and Rapid7 ICS. 
• Deploy configurations and infrastructure using Infrastructure as Code (IaC) frameworks, such as Terraform, Cloud Formation, and Pulumi. 
• Develop and implement governance strategies for infrastructure deployment that integrate security best practices and enhance developer productivity. 
• Write and maintain internal APIs to automate security processes, benefiting infrastructure and developer workflows. 

Required Skills and Qualifications:

• Intermediatelevel experience in AWS cloud account architecture. 
• Intermediate level knowledge in Network Security, including experience with AWS networking primitives: Security Groups, Network Access Control Lists (NACLS), Subnetting, Routing, and egress traffic filtering mechanisms. 
• Intermediate levelproficiency in Identity & Access Management (IAM) Security, including experience with architecting AWS IAM roles & policies using complex conditionals. 
• Intermediate level experience deploying and maintaining configurations and infrastructure using Terraform. 
• Intermediate level experience with modern CSPM and CWPP tools (e.g., Wiz, Orca, Prisma, or Rapid7). 
• Intermediate level experience with Secrets Management Platforms (e.g., AWS KMS, AWS Secrets Manager, Hashicorp Vault). 
• Intermediate level experience in building and implementing IaC governance strategies that combine security best practices while enabling developer productivity. 
• Intermediate level proficiency in Python or Go, and Bash scripting. 
• Intermediate level experience in building & maintaining Web Application Firewalls. 
• Intermediate level familiarity with security frameworks (e.g., PCI DSS, CIS, ISO 27001, NIST CSF). 

Preferred Skills and Qualifications:

• Intermediate level knowledge of Kubernetes (K8s) Security foundations, including admission controllers, K8s Network Policies, K8s RBAC, and K8s Ingress architectures. 
• Intermediate level proficiency in DDoS mitigation techniques using AWS Shield, CDN traffic scrubbing, and origin protection mechanisms. 
• Intermediate level proficiency in Azure. 

What We Offer:

• Accelerated Growth Environment: Immerse yourself in an environment designed for swift skill and knowledge enhancement, where you have the autonomy to lead experiments and tests on a massive scale.
• Top Tier Compensation Package: Enjoy a rewarding compensation package that includes enticing stock incentives, aligning with our commitment to recognizing and valuing your contributions.
• Flexible Time Off: Embrace a healthy work-life balance with unlimited Flex Time Off, providing you the flexibility to manage your schedule and recharge as needed.
• Comprehensive Benefits Package: Prioritize your well-being with a comprehensive benefits package, featuring 401k, and premium Health, Vision, and Dental Insurance options.
• Team-Building Events: Engage in vibrant team events that foster camaraderie and collaboration, creating an atmosphere where your professional and personal growth are celebrated.