Cloud Security Engineer

At ZoomInfo we encourage creativity, value innovation, demand teamwork, expect accountability and cherish results. If you are a take charge, take initiative, get stuff done individual we want to talk to you! We have high aspirations for the company and are looking for the right people to help fulfill the dream. We strive to continually improve every aspect of the company and use cutting edge technologies and processes to delight our customers and rapidly increase revenues.

Information security is an integral part of ZoomInfo corporate culture. We are looking for a Cloud Security Engineer to be part of the Infrastructure Security department under CSO Organization. This person will report directly to the Security Engineering Manager. You will have knowledge in cloud security and will be able to identify gaps in existing cloud (GCP/AWS) infrastructure. Ideal candidate is someone that has DevOps background with focus on Infrastructure security. Responsibilities include evaluation of cloud security tools and working with the Infrastructure Engineering (IE) team in implementing necessary security controls. You will also participate in design/architectural discussions with other stakeholders and ensure cyber-defense requirements are identified and communicated early in the project life-cycle.

Summary of Essential Job Functions:

• Design, implement and support security solutions which meet corporate security requirements.
• Make sure the company adheres to standards, practices and external regulations.
• Identify security issues and risks, prepare a game plan and lead it to completion by engaging with stakeholders.
• Provide solutions to incorporate effective measures against possible compromise as part of the organization's cybersecurity strategic plan.
• Constantly assess the security posture of the organization's existing network, hardware, software and information delivery systems to prevent and mitigate risks.
• Implement cybersecurity standards and ensure that the organization's cybersecurity infrastructure meets these established standards.
• Configure security tools (CSPM, SIEM etc.) to support the SOC team with a focus on Cloud Operations.
• Create and evolve internal runbooks and processes internally as well as with third party resources.

Minimum Requirements

• 5+ years hands-on experience in IT roles such as System / Infrastructure / Network.
• 3+ years experience in working with cloud resources in GCP or AWS environments.
• 3+ years hands-on experience in Information Security / Cyber Security as a security Engineer.
• A Bachelor of Science (B.Sc.) degree in Computer Science / Software Engineering or related field.
• Experience working with CSPM (Cloud Security Posture Management) tools for alerts and integration with Jira or Slack
• Expert knowledge in IT systems security, SaaS security, IaaS security, network security and endpoint security.
• Excellent analytical and problem-solving skills with ability to identify possible risks and provide solutions.
• Experience in analyzing security controls for cloud resources such as Virtual Machines, Security Groups, Kubernetes Clusters & RDS etc.
• Strong working knowledge of common security tools, such as a SIEM, Anti-Virus, Scanners, Proxies, WAF, IDS or Forensics tools
• Hands on experience in scripting such as Python

Education

• Bachelor's degree in computer science, information systems, or a related technical discipline or equivalent professional experience directly related to information security, cyber, or computer network defense
• Information Security Certification is a nice to have, but not required
• AWS/GCP Developer, Architecture or Security Specialty Certification is a nice to have, but not required

About us:

For over a decade, ZoomInfo has helped companies achieve their most important objective: profitable growth. Backed by the world's most comprehensive B2B database, our platform puts sales and marketing professionals in position to identify, connect, and engage with qualified prospects.

Our mission is to provide every company with a 360-degree view of their ideal customer, empowering each phase of their go-to-market strategy and driving their ability to hit their number.