Senior Cloud Security Engineer

Senior Cloud Security Engineer

Role Summary:
The Senior Cloud Security Engineer will join the Cyber Security Operations team, responsible for implementing and enhancing detective capabilities in a fully managed AWS/Azure environment. The ideal candidate will have deep knowledge of security controls, tools, features, and operations for cloud platforms, as well as a strong understanding of the evolving threat landscape.

Key Responsibilities:

• Build a detection engineering process and culture for a SIEM platform, covering on-premises and multi-cloud environments.
• Serve as a technical subject matter expert for the AWS/Azure environment, partnering with teams across Global Information Security.
• Design, develop, tune, and maintain detection content to protect the organization and support its information security policies and procedures.
• Review applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
• Implement technical solutions to enhance visibility, alerting capabilities, and reduce risk within the cloud environment.
• Collaborate with incident response teams, threat intelligence researchers, Red/Purple teams, and HUNT researchers.
• Stay up-to-date with common Information Security and data protection frameworks and standards (e.g., CIS, NIST, HIPAA, GDPR, PCI DSS, ISO 27001).

Qualifications:

• Bachelor's or Master's degree in Computer Science, Information Systems, Cyber Security, or a related field.
• 8+ years of relevant Cyber Security experience, with at least 5 years in Cloud SOC and/or Purple Team roles.
• Highly organized and motivated self-starter with the ability to deliver results with minimal direction.
• Proficient in writing and tuning detections, as well as working with SIEM tools.
• Experienced in designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS/Azure.
• Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND, as well as Risk Management principles.
• Experience in building, configuring, operating, and/or securing cloud infrastructure and applications in AWS/Azure.
• Ability to independently assess risks and identify vulnerabilities in infrastructure, with a proactive approach to suggesting process, policy, and control improvements.
• Excellent verbal and written communication skills, with the ability to effectively present key data points.

Preferred Certifications:

• CCSP / CCSK
• CISSP / CISM / Security