Cloud Network Security Engineer

Ethereum Technologies LLC; Bellevue (WA); On-site; USD 120,000 - 150,000; Full time

Job summary

A technology firm in Bellevue, WA is seeking a security expert with over 7 years of experience in cloud security, network security, or DevSecOps. The role involves integrating IaC security tools into CI/CD pipelines and managing cloud-native firewalls across AWS, Azure, and GCP. Candidates should be proficient in Terraform and have certifications like AWS/Azure/GCP Security Specialty or CISSP. The firm values diversity and equal opportunity in hiring practices.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python.

Responsibilities

• Integrate IaC security scanning tools into CI/CD pipelines.
• Analyze and remediate findings from IaC scans.
• Develop custom policies for IaC scanning tools.
• Design and implement native firewall rules across cloud platforms.
• Conduct regular reviews and audits of firewall configurations.
• Align firewall and IaC security policies with industry standards.

Skills

Cloud security

Network security

DevSecOps

Terraform

CloudFormation

AWS Firewall Services

Azure Firewall Services

GCP Firewall Services

Powershell

Bash

Python

Education

AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Tools

Checkov

Prisma Cloud

Aqua

Snyk

Job description

Overview

Job Description - IaC Security Scanning & Hardening: Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines. Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates). Develop custom policies for IaC scanning tools based on organizational security standards.

Responsibilities

• IaC Security Scanning & Hardening: Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines. Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates). Develop custom policies for IaC scanning tools based on organizational security standards.
• Firewall Implementation & Tuning: Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP). Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces. Conduct regular reviews and audits of firewall configurations and access controls.
• Risk Management & Compliance: Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001). Support internal and external audits by providing documentation and evidence of controls.

Requirements

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.

ETHEREUM TECHNOLOGIES LLC is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. ETHEREUM TECHNOLOGIES LLC will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will ETHEREUM TECHNOLOGIES LLC require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract