Cloud Security Engineer

Archer; Atlanta (GA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Gordon Food Service seeks a Cloud Security Engineer to define and implement security best practices in cloud environments, integrated with DevOps. You will lead vulnerability management, risk assessments, and secure provisioning across GCP, AWS, and Azure, while collaborating with software engineers on secure coding and configurations.

The role involves building automation for security in CI/CD, maintaining secure deployment solutions, and staying ahead of evolving threats.

Qualifications

• Bachelor's Degree in Computer Science or a related field is preferred.
• 5+ years of information technology experience (including software engineering, devops and/or system engineering).
• Knowledge of security concepts (SAST, DAST, RBAC, least privilege, secrets management, scanning tools, network security concepts, CIA triad).
• Strong written and verbal communication skills and problem-solving abilities.
• Ability to multitask, prioritize and work independently or within a team.
• Experience with public cloud providers such as Google Cloud Platform (GCP), AWS and Azure.
• Experience with application containerization and container orchestration technologies.
• Experience with cloud-specific networking to provide mesh and least privilege access.
• Experience with software-defined networking including routing, bridging, VLANs and switches.
• Experience with build, configuration and provisioning tools.
• Experience with languages used in cloud development and configuration.
• Experience with automating build and release processes.
• Knowledge of Unix/Linux.
• Familiarity with Google Apps is a plus.

Responsibilities

• Drive introduction and adoption of Enterprise Information Security processes into cloud environments.
• Provide cloud configuration and deployment expertise to Gordon Food Service.
• Analyze cloud platform vulnerabilities and guide resolution.
• Define secure provisioning, configuration and operational aspects of cloud environments.
• Write and maintain configuration and deployment solutions (as code) for security CI/CD requirements.
• Stay updated on dynamic cloud threat landscape and adapt protection strategies.
• Perform security risk assessments for new cloud-related technologies or tools.
• Coordinate external security assessments (e.g., grey-box tests).
• Provide cloud architecture guidance with a focus on security to software engineers.
• Write and maintain secure coding and configuration standards for custom software.

Skills

Security concepts

Cloud security

CI/CD automation

Vulnerability management

Threat assessment

Unix/Linux

Education

Bachelor's degree in CS or related

Tools

GCP

AWS

Azure

Containerization

Kubernetes

Configuration management

CI/CD tooling

Job description

Archer is collaborating with Gordon Food Service to connect them with exceptional professionals for this role.

Welcome to Gordon Food Service! We are excited that you are thinking about opportunities with us, and we have an amazing story to share. See below for a quick glance of who we are and the impact you could have on the food service industry. There’s a seat at our table for you...

Position Summary

The Cloud Security Engineer defines, documents, and implements infrastructure and application security best practices and standards in the cloud. Integrates into and works alongside DevOps teams. Develops automation tooling, specific to security, to support Continuous Integration and Deployment (CI/CD), enabling software development teams to provide continuous value while maintaining and enhancing application security. Leads and participates in the evaluation, specification and recommendation of public cloud services. Assists with the provisioning and maintaining of on and off premise cloud infrastructures and related software to ensure a secure environment.

What You Will Do

• Drive introduction and adoption of the Enterprise Information Security (EIS) team processes and disciplines into cloud environments (e.g. Risk Management, Vulnerability Management, Secure Application Development, Secure Environment Configuration, Identity Management, etc.)
• Provide cloud configuration and deployment expertise to Gordon Food Service
• Analyze cloud platform vulnerabilities, providing guidance and management to resolution
• Study, define and implement secure provisioning, configuration and operational aspects of cloud environments
• Write and maintain configuration and deployment solutions (via code) in support of security related CI/CD requirements
• Research and keep abreast of the dynamic threat landscape associated with cloud security, adapting Gordon Food Service protection strategies to proactively cope with emerging threats
• Perform security risk assessments (e.g. risk analysis for new cloud related technologies or tools)
• Perform internal penetration testing against new or modified software solutions
• Coordinate external security assessments (e.g. “grey-box” web application penetration tests)
• Provide cloud architecture guidance with a focus on security related topics to Gordon Food Service software engineers
• Write, maintain and assist with secure coding, configuration standards and best practices for custom software development at Gordon Food Service
• Interface with various teams across the organization in day to day activities
• Other duties and responsibilities as assigned

When You Will Work

• Monday to Friday, 8am to 5pm
• Hybrid schedule, 4 days in office in Wyoming, MI or Atlanta, GA with 1 day remote

What You’ll Bring To The Table

• Bachelor's Degree in Computer Science or a related field preferred.
• Five or more years of information technology experience (including software engineering, devops and/or system engineering experience) or an equivalent combination of education, training, and experience required.
• Knowledge of security concepts (e.g. SAST, DAST, RBAC, least privilege, secrets management, scanning tools, network security concepts, CIA triad, etc.)
• Must have good written and verbal communication skills as well as good organizational and problem-solving capabilities
• Must have the ability to multitask, prioritize and be able to work independently or within a team environment
• Experience with public cloud providers such as Google Cloud Platform (GCP), AWS and Azure
• Experience with application containerization and container orchestration technologies
• Experience with cloud specific networking technology to provide mesh and least privilege network access
• Experience with software defined networking including routing, bridging, VLANs and switches
• Experience with build tools, configuration management tools, provisioning tools
• Experience with languages used in cloud development and configuration
• Experience with automating build and release processes
• Knowledge with Unix/Linux
• Knowledge of spreadsheet, word processing, presentation, email and internet software applications, particularly Google Apps

BE PART OF AN AMAZING CULTURE WHERE WHAT MATTERS TO YOU, MATTERS TO US!

Gordon Food Service values our customers and understands that their success is largely dependent upon their workforce. To demonstrate our commitment to our partnership, we will require any candidate who works for a Gordon Food Service customer to provide a letter of support from their management if they are selected for the interview process.

Equal Employment Opportunity

Equal Employment Opportunity is a matter of policy at Gordon Food Service, Inc. and we are committed to a work environment in which all individuals are treated with respect and dignity.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, status as a protected veteran, or status as a qualified individual with disability. If you require reasonable accommodation for any part of the application or hiring process due to a disability, please submit your request to [e-mail] and use the words “Accommodation Request” in your subject line.

All Gordon Food Service locations are tobacco-free. Gordon Food Service is a drug-free workplace and conducts pre-employment drug tests.