Cloud security engineer

Key Responsibilities

• Design, implement, and maintain robust security controls and best practices within AWS environments.
• Integrate security into CI/CD pipelines using DevSecOps methodologies, including SAST/DAST scans and automated pipelines enforcement.
• Identify, assess, and resolve cloud misconfigurations, and facilitate corrective remediation with relevant teams.
• Leverage infrastructure-as-code (Terraform, CloudFormation) to manage secure deployments and enforce guardrails.
• Participate in vulnerability management through tools like CSPM (Cloud Security Posture Management) and adhere to frameworks like CIS, AWS Well-Architected, and NIST.
• Automate security tasks using scripting languages (Python, Go, Bash) to improve repeatability and reliability.
• Maintain and audit IAM policies, roles, and segmentation to uphold least privilege principles.
• Respond to security incidents and conduct regular compliance assessments and remediation tracking.

Qualifications

• 16 years of experience in cloud and infrastructure security, including cloud and network security reviews and defining security best practices.
• A breaker mindset with a strong ability to identify vulnerabilities and design effective mitigating controls.
• Hands-on experience with security administration in cloud platforms such as AWS, GCP, or Azure.
• Familiarity with CI/CD and DevOps tooling (e.g., GitHub, GitLab, Buildkite).
• Proficiency in scripting languages such as Python or Golang.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, Chef, or Ansible.
• Comfortable using command-line interfaces (e.g., Bash, PowerShell).
• Understanding of network and infrastructure engineering principles.
• Practical experience with cloud-native security tools (e.g., AWS GuardDuty, AWS WAF, GCP Security Command Center).
• Strong interpersonal and communication skills, with the ability to explain complex technical issues to both technical and non-technical audiences.