Senior Cloud Security Engineer
Role Summary:
The Senior Cloud Security Engineer will join the Cyber Security Operations team, responsible for implementing and enhancing detective capabilities in a fully managed AWS/Azure environment. The ideal candidate will have deep knowledge of security controls, tools, features, and operations for cloud platforms, as well as a strong understanding of the evolving threat landscape.
Key Responsibilities:
- Build a detection engineering process and culture for a SIEM platform, covering on-premises and multi-cloud environments.
- Serve as a technical subject matter expert for the AWS/Azure environment, partnering with teams across Global Information Security.
- Design, develop, tune, and maintain detection content to protect the organization and support its information security policies and procedures.
- Review applications, infrastructure, and architectural designs to identify threats and vulnerabilities.
- Implement technical solutions to enhance visibility, alerting capabilities, and reduce risk within the cloud environment.
- Collaborate with incident response teams, threat intelligence researchers, Red/Purple teams, and HUNT researchers.
- Stay up-to-date with common Information Security and data protection frameworks and standards (e.g., CIS, NIST, HIPAA, GDPR, PCI DSS, ISO 27001).
Qualifications:
- Bachelor's or Master's degree in Computer Science, Information Systems, Cyber Security, or a related field.
- 8+ years of relevant Cyber Security experience, with at least 5 years in Cloud SOC and/or Purple Team roles.
- Highly organized and motivated self-starter with the ability to deliver results with minimal direction.
- Proficient in writing and tuning detections, as well as working with SIEM tools.
- Experienced in designing and implementing technical solutions to enhance visibility, alerting capabilities, and reduce risk within AWS/Azure.
- Understanding of threat frameworks, such as MITRE ATTCK for Cloud and D3FEND, as well as Risk Management principles.
- Experience in building, configuring, operating, and/or securing cloud infrastructure and applications in AWS/Azure.
- Ability to independently assess risks and identify vulnerabilities in infrastructure, with a proactive approach to suggesting process, policy, and control improvements.
- Excellent verbal and written communication skills, with the ability to effectively present key data points.
Preferred Certifications:
- CCSP / CCSK
- CISSP / CISM / Security