Senior Cloud Security Engineer

VaporVM Ltd.; Dubai; Presencial; AED 350.000 - 650.000; Jornada completa

Descripción de la vacante

VaporVM Ltd. seeks a Senior Cloud Security Engineer to design and secure scalable AWS-based infrastructure across deployments. You will embed security into the SDLC, lead DevSecOps initiatives, and drive automation with IaC and CI/CD improvements.

The role requires deep experience in IAM, CSPM, SIEM/EDR, and multi-region resilience, with hands-on Kubernetes, EKS, and container security. You will mentor engineers and promote security best practices.

Formación

• Strong hands-on experience with AWS cloud services including IAM, networking, and security.
• Proven DevSecOps, CI/CD automation, GitOps, and secure software delivery practices.
• Proficiency in Terraform, CloudFormation, and Ansible for IaC provisioning and config management.
• Experience with SIEM, SOAR, EDR, CSPM technologies (Splunk, CrowdStrike, Qualys, Wiz).
• Understanding of IAM, encryption, KMS, secrets management, and network security.
• Hands-on security for Docker, Kubernetes, and EKS environments.
• Scripting and automation in Python, Bash, or PowerShell.
• Knowledge of NIST, CIS, FedRAMP, and multi-region cloud architectures.

Responsabilidades

• Design, implement, and maintain secure, scalable AWS cloud architectures.
• Lead DevSecOps by embedding security controls into CI/CD pipelines.
• Develop and maintain IaC using Terraform, CloudFormation, and Ansible.
• Build and secure CI/CD pipelines with GitLab CI/CD, Jenkins, and GitOps.
• Implement IAM, PAM, federation, and access governance solutions.
• Integrate SIEM, SOAR, EDR, and CSPM for threat detection and remediation.
• Automate incident response using AWS Lambda and Step Functions.
• Ensure cloud security governance aligned with NIST, CIS, FedRAMP.
• Secure containers and orchestration (Docker, Kubernetes, EKS).
• Manage vulnerability remediation, endpoint protection, and CSPM tools.

Conocimientos

AWS security

DevSecOps

CI/CD automation

GitOps

Scripting

Security monitoring

cross-functional collaboration

Herramientas

Terraform

CloudFormation

Ansible

Splunk

CrowdStrike

Qualys

Wiz

Docker

Kubernetes

Amazon EKS

Descripción del empleo

We are seeking an experienced Senior Cloud Security Engineer to design, implement, and maintain secure, scalable, and resilient cloud infrastructure, primarily across AWS environments. The ideal candidate will possess strong expertise in cloud security architecture, DevSecOps, infrastructure automation, and security operations, with the ability to integrate security throughout the development lifecycle while ensuring compliance, operational efficiency, and business continuity.

Key Responsibilities

• Design, implement, and maintain secure, scalable, and highly available AWS cloud architectures.
• Lead DevSecOps initiatives by embedding security controls, vulnerability scanning, and compliance checks into CI/CD pipelines.
• Develop and maintain Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, and Ansible.
• Build, optimize, and secure CI/CD pipelines using GitLab CI/CD, Jenkins, and GitOps practices.
• Implement and manage IAM, PAM, identity federation, and access governance solutions, including AWS IAM Identity Center and third-party identity providers.
• Integrate SIEM, SOAR, EDR, and Cloud Security Posture Management (CSPM) solutions to enhance threat detection, investigation, and automated remediation.
• Develop automated incident response and remediation workflows using AWS Lambda, Step Functions, and other cloud-native services.
• Implement cloud security controls and governance practices aligned with NIST, CIS Benchmarks, FedRAMP, and other applicable security standards.
• Secure containerized workloads and orchestration platforms, including Docker, Kubernetes, and Amazon EKS.
• Manage vulnerability assessment, remediation, endpoint protection, and cloud security posture using tools such as CrowdStrike, Qualys, and Wiz.
• Design and maintain secure cloud networking architectures, including VPCs, VPNs, Transit Gateway, and PrivateLink.
• Implement encryption, key management, secrets management, and data protection controls across cloud environments.
• Establish monitoring, logging, alerting, and observability solutions using Splunk, Prometheus, Grafana, and Datadog.
• Design and test disaster recovery and business continuity strategies, including multi-region resilience and high-availability configurations.
• Automate cloud operations and security processes using Python, Bash, and PowerShell.
• Conduct security assessments, risk analysis, compliance audits, and root cause investigations, ensuring timely remediation of identified issues.
• Collaborate with Security, DevOps, and Engineering teams to improve cloud security posture and operational reliability.
• Provide technical guidance and mentorship to junior engineers while promoting security best practices.

Required Skills & Qualifications

• Strong hands-on experience with AWS cloud services, including compute, storage, networking, IAM, and cloud security.
• Proven experience in DevSecOps, CI/CD automation, GitOps, and secure software delivery practices.
• Proficiency in Terraform, CloudFormation, and Ansible for infrastructure provisioning and configuration management.
• Experience with SIEM, SOAR, EDR, and CSPM technologies, preferably Splunk, CrowdStrike, Qualys, and Wiz.
• Strong understanding of IAM, PAM, identity federation, encryption, AWS KMS, secrets management, and network security.
• Hands-on experience securing Docker containers, Kubernetes clusters, and Amazon EKS environments.
• Strong scripting and automation skills using Python, Bash, and/or PowerShell.
• Experience with security monitoring, incident response, vulnerability management, and automated remediation.
• Knowledge of cloud compliance and security frameworks, including NIST, CIS, and FedRAMP.
• Understanding of high availability, disaster recovery, business continuity, and multi-region cloud architectures.
• Strong troubleshooting, analytical, communication, and cross-functional collaboration skills.

Preferred Qualifications

• AWS Certified Solutions Architect – Professional.
• AWS Certified Security – Specialty.
• Experience with Azure or multi-cloud security environments.
• Practical experience implementing FedRAMP, NIST, or CIS compliance controls.
• Exposure to AI/ML security, cloud workload protection, and emerging cloud security technologies.
• Experience leading cloud security initiatives and mentoring technical teams.