Cloud Security Engineer

Jobtailor; Deutschland; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Security training

Zusammenfassung

Jobtailor is seeking a Cloud Security Specialist to implement controls across AWS, GCP, and Azure, aligning with SOC 2, ISO 27001, GDPR, and HIPAA requirements.

You will assess client environments, deploy security tools, automate operations with IaC, and collaborate with engineering teams to secure CI/CD pipelines while engaging directly with US-based clients.

Qualifikationen

• Hands-on experience securing AWS, GCP, or Azure environments.
• Experience with OCI (Oracle Cloud Infrastructure) is a plus.
• Strong understanding of cloud security, IAM, network security, and compliance controls.
• Proficiency in security automation using IaC and scripting tools.
• Familiarity with SOC 2, ISO 27001, GDPR, or HIPAA compliance programs.

Aufgaben

• Implement Cloud Security Controls across multi-cloud environments.
• Assess client infrastructures for risks and vulnerabilities with remediation guidance.
• Deploy and manage SIEM, IDS/IPS, vulnerability management, and identity solutions.
• Support compliance initiatives including SOC 2, ISO 27001, and HIPAA.
• Automate security operations with IaC and automation scripts.
• Conduct cloud security reviews and architecture assessments.
• Collaborate with engineering to integrate security in CI/CD pipelines.
• Assist in incident response and client communication.

Kenntnisse

AWS Security

GCP Security

Azure Security

Security Automation

IAM

Network Security

Terraform

Python

Bash

Incident Response

Written Communication

Verbal Communication

Client Management

SOC 2

ISO 27001

GDPR

HIPAA

EDR

MDM

Vulnerability Management

Tools

Terraform

AWS CloudFormation

Python

Bash

PowerShell

Jobbeschreibung

• Implement Cloud Security Controls : Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards.
• Assess Cloud Environments : Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations.
• Deploy and Manage Security Tools : Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
• Support Compliance Initiatives : Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation.
• Automate Security Operations : Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls.
• Conduct Cloud Security Reviews : Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
• Collaborate with Engineering Teams : Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
• Assist in Incident Response : Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
• Communicate with Clients : Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Requirements

• Hands-on experience securing AWS, GCP, or Azure environments.
• Must have hands-on experience with Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM
• Strong understanding of cloud security principles, IAM, network security, and compliance controls.
• Proficiency in security automation using tools like Terraform, AWS CloudFormation, Python, or Bash.
• Working knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA.
• Experience with Microsoft security and identity ecosystem, including Azure, Microsoft Entra (Azure AD), EDR, MDM, and VDI environments.
• Excellent troubleshooting and problem-solving abilities.
• Strong written and verbal communication skills in English.
• Ability to manage multiple client projects and interact directly with US-based clients.

Core Competencies

Demonstrates expertise in implementing and managing cloud security controls across AWS, GCP, and Azure, with a strong focus on compliance frameworks such as SOC 2 and ISO 27001. Proficient in security automation and incident response, ensuring robust security posture and effective client communication.

Highest-signal resume keywords

• AWS Security
• GCP Security
• Azure Security
• Security Automation
• Compliance Frameworks

ATS Optimization Keywords

Hard Skills

• Cloud Security Principles
• Identity Access Management (IAM)
• Network Security
• Vulnerability Management
• Infrastructure-as-Code (IaC)
• Terraform
• AWS CloudFormation
• Python
• Bash
• Incident Response

Soft Skills

• Troubleshooting
• Problem-Solving
• Written Communication
• Verbal Communication
• Client Management

Industry Keywords

• SOC 2
• ISO 27001
• HIPAA
• GDPR
• Cloud Security Controls

Tools & Technologies

• SIEM
• IDS/IPS
• Microsoft Entra (Azure AD)
• EDR
• MDM
• VDI