Cloud Security Engineer

Responsibilities

• Designs and implements comprehensive security architectures for AWS cloud environments, including multi-account strategies, network security, and data protection mechanisms.
• Configures and manages AWS security services including IAM, Security Hub, Guard Duty, Cloud Trail, Config, KMS, WAF, and Shield to maintain continuous security monitoring and threat detection.
• Integrates security controls into CI/CD pipelines across Jenkins and Bitbucket, implementing SAST, DAST, SCA, and secrets scanning to enable shift-left security practices.
• Partners with development teams to embed security throughout the software development lifecycle, providing guidance on secure coding practices, threat modeling, and vulnerability remediation.
• Implements and maintains container security for ECS and Kubernetes (EKS) environments, including image scanning, runtime security monitoring, RBAC configuration, and network policy enforcement.
• Develops and enforces Infrastructure as Code (IaC) security standards for Terraform and Cloud Formation, including policy-as-code implementation, state file protection, and automated security scanning.
• Designs and implements authentication and authorization solutions using OAuth, OIDC, and SAML, following Zero Trust principles and least-privilege access models.
• Establishes and supports security champion programs within development teams, providing training, resources, and guidance to promote security awareness and best practices.
• Conducts security assessments, vulnerability management, and penetration testing coordination to identify and remediate security risks across cloud infrastructure and applications.
• Responds to security incidents, conducts forensic analysis, and develops automated remediation runbooks to improve incident response capabilities.
• Integrates and manages SIEM and logging solutions for security event correlation, threat detection, and compliance reporting.
• Collaborates with Dev Ops, development, IT, and compliance teams to ensure security requirements are met while enabling business objectives and maintaining operational efficiency.
• Mentors junior security engineers, conducts architecture reviews, and contributes to the development of security policies, standards, and procedures.
• Stays current with emerging cloud security threats, vulnerabilities, and best practices, recommending and implementing security improvements to strengthen the organization's security posture.
• Any additional duties assigned by management.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field, or equivalent work experience.
• At least 3-5 years of experience in information security with a strong focus on cloud security.
• Demonstrated hands-on experience with AWS security services including IAM, Security Hub, Guard Duty, Cloud Trail, Config, KMS, and WAF.
• Experience designing and implementing security controls in AWS cloud environments.
• Proven experience integrating security into CI/CD pipelines using tools such as Jenkins and Bitbucket.
• AWS Certified Security – Specialty certification required or must be able to obtain within 12 months.
• Strong experience with container composition, runtime environments (ECS, EKS) and container security.
• Working knowledge of Infrastructure as Code tools (Terraform, Cloud Formation) or ability to learn.
• Experience with authentication and authorization protocols including OAuth, OIDC, SAML, and SSO implementations.
• Strong experience with Entra  conditional access policies, application registrations and RBAC.
• Experience with Azure B2C.
• Demonstrated experience with code scanning tools, web application firewalls, and vulnerability management.
• Strong understanding of Dev Sec Ops  principles and shift-left security practices.
• CISSP or equivalent security certification preferred.
• Strong communication and leadership skills with the ability to explain technical security concepts to both technical and non-technical audiences.
• Strong attention to detail and accuracy.
• Ability to work collaboratively across teams and build strong relationships with developers, operations teams, and business stakeholders.