Cloud Security Specialist

Job Summary

About the Role:

Grade Level (for internal use): 11

Responsibilities

• Support the development and execution of enterprise-wide Cloud security program
• Define and manage security controls for a multi-cloud architecture
• Configure, maintain, deploy, and write rules in Cloud security tools
• Design and implement 3rd party and cloud-native tooling to meet defined requirements
• Develop standard operating procedures and trainings for each technology
• Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions utilizing automation where possible
• Review and investigate alerts generated from Cloud security tools and escalate as appropriate
• Review and assess utilization of Cloud security tooling
• Promote and drive adoption of Cloud security tooling across the enterprise
• Partner across the Security Operations team to respond to cybersecurity incidents
• Develop and report Cloud security coverage metrics and remediation plans
• Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of Cloud networks and technology platforms
• Conducting research to stay up-to-date with the latest advancements in generative AI, machine learning, and deep learning techniques and identify opportunities to integrate them into our products and services.

Qualifications

• BachelorsDegree or industry equivalent work experience in cybersecurity, international securityarchitecture, and/or engineering in a converged security program
• 3-5 years of experience operating with at least one cloud provider, preferably GCP, Azure, or AWS
• Strong understanding of Cloud security industry standards and best practices (CSA CCM, CIS, NIST benchmarks, etc.)
• Proficient use of Linux, MacOS, and Windows Operating System tools
• Operating and maintaining tools across Cloud security technology stack (CSPM, CWPP, SASE, CASB, CIEM, Cloud native features like GuardDuty, AWS Config, Amazon Inspector, etc.)
• Ability to visualize and integrate cloud specific data and alerts with other security systems
• Advanced hands-on experience using one or more programming/scripting languages (e.g., Python, Go, Java, Terraform, etc.)
• Experience in a multi-cloud or hybrid cloud environment
• Working knowledge of SecDevOps and Shift Left concepts
• Technical knowledge of Kubernetes and Docker technologies and associated security requirements (Kubernetes, Docker, etc.)
• Experience contributing to the system design (architecture, design patterns, reliability, and scaling) of new and current cloud based GenAI services.
• Familiarity with source code management and CI/CD tools (e.g., Github, Bitbucket, Jenkins, Artifactory, etc.)
• At least one associate level cloud certification (AWS solutions architect, GCP Associate CloudEngineer, etc.)