Senior Cloud Security Engineer

Career Connect; Philippines; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

Career Connect is seeking a Senior Cloud Security Engineer to design, implement, and manage robust security solutions for our cloud infrastructure. You will lead a security-focused team and work with DevOps, Engineering, and Compliance to embed security into cloud operations.

The role requires deep cloud security knowledge, risk management, and compliance with GDPR, HIPAA, PCI-DSS contexts where applicable.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related fields.
• At least 2 years of experience in cloud infrastructure and security, preferably in fintech or financial institutions.
• 2–3 years of experience with IAM, cloud management, SIEM, scripting, and OS administration.

Responsibilities

• Leading the team, creating action plans for cloud security deliverables, and evaluating team performance for continuous improvement.
• Provide guidance and mentorship to junior security engineers and team members.
• Lead the design and implementation of infrastructure security hardening for cloud environments (AWS, Azure, GCP).
• Implement new cloud features and services as required.
• Ensure the overall security posture of cloud environments is maintained and continuously improved.
• Develop and enforce security policies, standards, and procedures for cloud services.
• Conduct a cloud user access review.
• Collaborate with cross-functional teams, including DevOps, Engineering, and Compliance, to ensure security is integrated into all aspects of cloud operations.
• Communicate security risks and recommendations to senior management and other stakeholders clearly and effectively.
• Evaluate and implement security tools and technologies to enhance cloud security posture
• Stay current with emerging cloud security trends, threats, and technologies.
• Provide Level 3 technical support and resolve security issues through root cause analysis.
• Participating in global follow-the-sun support, including after-hours on-call duties
• Analyze and remediate security incidents, breaches, or threats.

Skills

Identity and Access Management

Cloud Management

SIEM / EDR / Threat intel

Scripting (Python, Bash, PowerShell)

Linux & Windows Administration

Agile Methodology (Scrum, Jira)

Key Management (KMS, Vault)

Education

Bachelor's degree in Computer Science or related fields

Tools

AWS Security Hub

AWS S3

AWS Route53

AWS CloudWatch

Digital Ocean

GCP

Azure

Trend Micro Vision One

Crowdstrike Falcon

Splunk

AWS GuardDuty

AWS CLI

Python

Bash

PowerShell

Linux

Windows

Job description

The Senior Cloud Security Engineer will be responsible for designing, implementing, and managing robust security solutions for our cloud infrastructure. This role requires a deep understanding of cloud security best practices, risk management, and compliance frameworks. The Senior Cloud Security Engineer will work closely with cross-functional teams to ensure the security of our cloud environments and protect sensitive data. The role involves leading and guiding a team, strong problem-solving skills, attention to detail, and effective communication are essential for collaborating across teams and implementing robust security practices

KEY RESPONSIBILITIES

People Management

• Leading the team, creating action plans for cloud security deliverables, and evaluating team performance for continuous improvement.
• Provide guidance and mentorship to junior security engineers and team members.

Security Posture Management

• Lead the design and implementation of infrastructure security hardening for cloud environments (AWS, Azure, GCP).
• Implement new cloud features and services as required.
• Ensure the overall security posture of cloud environments is maintained and continuously improved.
• Ensure all cloud resources are well-secured.
• Develop and enforce security policies, standards, and procedures for cloud services.
• Conduct a cloud user access review.
  

Compliance and Governance

• Ensure compliance with relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI-DSS).
• Maintain up-to-date documentation of security policies, procedures, and compliance status.
• Identify, assess, and prioritize security risks associated with cloud services and applications.
• Develop and implement risk mitigation strategies and ensure they are effectively communicated to stakeholders.

Collaboration and Learning

• Collaborate with cross-functional teams, including DevOps, Engineering, and
• Compliance, to ensure security is integrated into all aspects of cloud operations.
• Communicate security risks and recommendations to senior management and other stakeholders clearly and effectively.
• Evaluate and implement security tools and technologies to enhance cloud security posture
• Stay current with emerging cloud security trends, threats, and technologies.
• Provide Level 3 technical support and resolve security issues through root causE analysis.
• Participating in global follow-the-sun support, including after-hours on-call duties
• Analyze and remediate security incidents, breaches, or threats.

Documentation:

• Provide clear task breakdowns and time estimates.
• Document configurations, processes, and incident resolutions.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or related fields.
• At least 2 years of experience in cloud infrastructure and security, preferably in fintech or financial institutions.
• 2-3 years of experience in the following skills/tools:
• Identity and Access Management (OKTA, AWS IAM, SSO, MFA, VPN)
• Cloud Management (AWS Securty Hub, AWS S3, AWS Route53, AWS Cloudwatch, Digital Ocean, GCP, Azure)
• SIEM, FIM, and IPS/IDS (AWS Cloudtrail, Trend Micro Vision One, Crowdstrike Falcon, Splunk, AWS Guard Duty)
• Scripting (AWS CLI, Python, Bash, Powershell)
• Linux and Windows Administration
• Agile Methodology (Scrum, JIRA, Confluence, GitLab Issue)
• Key Management (AWS Secrets, AWS KMS, Hashicorp Vault)

REQUIRED COMPETENCIES:

• Project Management: Ability to manage multiple cloud security projects simultaneously, ensuring timely and efficient delivery.
• Cloud Security Knowledge: Deep understanding of cloud security principles, architectures, and best practices across major cloud platforms (AWS, Azure, GCP)
• Security Frameworks and Compliance: Proficiency in security frameworks (NIST, ISO 27001, CIS) and compliance standards (GDPR, HIPAA, PCI-DSS)
• Security Tools and Technologies: Familiarity with security tools such as SIEM, DLP, CSPM, and endpoint protection solutions
• Attention to Detail: Ensures accuracy and thoroughness in all technical tasks and documentation.