Senior Cloud Security Engineer

Avant Digital Inc.; San Francisco (CA); Remote; USD 120,000 - 180,000; Full time

Job summary

An innovative firm is seeking a Senior Cloud Security Engineer to enhance the security of its cloud infrastructure. In this pivotal role, you will collaborate with engineering and IT teams to design and implement robust security policies, conduct risk assessments, and respond to incidents. You will be at the forefront of ensuring compliance with industry standards while mentoring team members on cloud security best practices. This position offers a unique opportunity to work in a dynamic environment where your expertise will contribute to the security of cutting-edge cloud technologies. Join a team that values collaboration and innovation in the ever-evolving landscape of cybersecurity.

Qualifications

• 10+ years of experience in security engineering or cloud security.
• Strong knowledge of cloud security concepts and best practices.
• Certifications in cloud security are mandatory.

Responsibilities

• Develop and maintain security policies for cloud environments.
• Conduct security assessments and audits of cloud infrastructure.
• Mentor staff on cloud-based security controls.

Skills

Cloud Security

Risk Assessment

Incident Response

Communication Skills

Problem-Solving Skills

Scripting Languages (Python, Bash, PowerShell)

Education

Bachelor's degree in Computer Science

Certifications in Cloud Security

Tools

AWS

GCP

Kubernetes

Docker

Terraform

SIEM

WAF

Vulnerability Scanning Tools

Job description

Senior Cloud Security Engineer

Job Description:

Location: Remote

Contract type - Contract / C2C

Juniper Networks Cyber Fusion is looking for a certified cybersecurity professional to join our highly collaborative and diverse team of talent, who will be responsible for ensuring the security and compliance of our cloud infrastructure and data. You will work with the engineering, DevOps, and IT teams to design, implement, and maintain security policies, controls, and tools. You will also perform audits, risk assessments, and incident response activities to ensure compliance with industry standards and regulations.

In this role, you will:

• Develop and maintain security policies, standards, and procedures for cloud environments.
• Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps.
• Implement and monitor security controls and tools for cloud platforms and services. Support the security of AWS, GCP, Kubernetes/Docker, and Terraform-based infrastructure.
• Mentor engineering and operations staff on unique cloud-based security controls.
• Conduct security assessments and audits of cloud infrastructure and data.
• Identify and remediate security vulnerabilities and incidents.
• Support compliance initiatives and certifications for cloud environments.
• Provide security guidance and best practices to engineering, DevOps, and IT teams.
• Stay updated on emerging security threats and trends for cloud environments.

Qualifications

• Bachelor's degree in computer science, Information Security, or a related field.
• 10+ years of experience in security engineering, cloud security, or compliance.
• Strong knowledge of cloud security concepts, principles, and practices.
• Familiarity with cloud security best practices and frameworks (e.g., CISv8, NIST, ISO, CSA).
• Experience creating and maintaining security documentation, such as policies, standards, procedures, and guidelines.
• Experience with tool sets relevant to modern cloud operations like SIEM, WAF, vulnerability scans, pen tests, CIS benchmarking, etc.
• Working knowledge of OWASP Web/API vulnerabilities (CSRF, XSS, SQLI, etc.) and compensating controls.
• Knowledge of Web/API security architecture common authentication and authorization technologies (OIDC, OAuth2, Spring Security, HMAC, WS-Security, WS-Trust).
• Solid understanding of applied cryptography fundamentals (Encryption, Authentication, Symmetric Cryptography, Asymmetric Cryptography, etc.).
• Ability to translate complex technical concepts into clear and concise language for diverse audiences and attention to detail with quality assurance.
• Hands-on experience with security tools, frameworks for cloud platforms (e.g., AWS, Azure, GCP), and technologies (e.g., firewalls, encryption, identity and access management, vulnerability scanning, penetration testing).
• Experience with security standards and regulations for cloud environments (e.g., ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR).
• Experience with scripting languages (e.g., Python, Bash, PowerShell).
• Excellent communication, collaboration, and problem-solving skills.
• Certifications in cloud security or compliance (e.g., AWS Certified Security Specialist, Azure Security Engineer, CCSK, CCSP) are mandatory.

Basic Requirements

• Effective verbal and non-verbal communication skills at all levels of the organization.