Senior Cloud Security Engineer - R01573020

Brillio; New York (NY); Sur place; USD 120 000 - 130 000; Plein temps

Résumé du poste

Brillio is seeking a Senior Cloud Security Engineer to join our security team in the United States. You will design and implement cloud security controls across AWS, Azure, and GCP, promote secure-by-default practices, and drive security across development lifecycles.

You will partner with engineering and infrastructure teams to strengthen cloud posture, automate security tooling, and conduct third-party assessments, threat modeling, and incident response to protect Brillio's digital assets.

Qualifications

• Minimum 5+ years in information security or cybersecurity with at least 2+ years in cloud security.
• Strong understanding of AWS services (IAM, EC2, VPC, ECR, ECS, EKS).
• Knowledge of Azure services and security configurations; basic GCP security concepts.
• Hands-on experience with CNAPP tools (Wiz, Orca, Lacework, Upwind).
• Python or Go for security automation tooling; Docker and Kubernetes experience.
• Solid grasp of least privilege, defense-in-depth, monitoring, and CSPM principles.
• Excellent communication and ability to work with engineering teams.

Responsabilités

• Security automation: develop and implement automated tools and guardrails for secure-by-default practices.
• Cloud infrastructure security: design, implement, and maintain scalable security controls.
• Security engineering: implement enhancements and improve cloud security posture.
• Cross-functional collaboration: partner with engineering, infrastructure, and stakeholders.
• Security incident response: support investigations and remediation efforts.
• Third-party security assessments: assess integrations and AI tools for data protection.
• Threat modeling: participate in architecture reviews to identify vulnerabilities.
• Security enablement: educate teams on best practices and risk mitigation.

Connaissances

Cloud security

Security automation

Threat modeling

Security monitoring

Communication skills

Outils

AWS IAM

AWS EC2

AWS VPC

AWS ECR

AWS ECS

AWS EKS

Azure

GCP

CNAPP

Python

Go

Docker

Kubernetes

Wiz

Orca Security

Lacework

Upwind

Description du poste

About Brillio:

Brillio is one of the fastest growing digital technology service providers and a partner of choice for many Fortune 1000 companies seeking to turn disruption into a competitive advantage through innovative digital adoption.Brillio, renowned for its world-class professionals, referred to as "Brillians", distinguishes itself through their capacity to seamlessly integrate cutting-edge digital and design thinking skills with an unwavering dedication to client satisfaction.

Brillio takes pride in its status as an employer of choice, consistently attracting the most exceptional and talented individuals due to its unwavering emphasis on contemporary, groundbreaking technologies, and exclusive digital projects. Brillio's relentless commitment to providing an exceptional experience to its Brillians and nurturing their full potential consistently garners them the Great Place to Work® certification year after year.

Senior Cloud Security Engineer

Primary Skills

• SAP GRC, Nessus, Information Security & Cybersecurity, Cloud Security, Archer, Metasploit, Wireshark, Burpsuite, AWS Secrets Manager, Nmap, PaaS - Security, CxSAST, Web Application Scanning (WAS), ServiceNow GRC, AppScan

Job requirements

Key Responsibilities

This role combines cloud security engineering, infrastructure protection, automation, and cross-functional collaboration.

• Security Automation: Develop and implement automated security tools, frameworks, and guardrails that enable engineering teams to adopt secure-by-default practices without impacting development velocity.

• Cloud Infrastructure Security: Design, implement, and maintain scalable security controls to protect cloud infrastructure, applications, and enterprise environments.

• Security Engineering: Partner with engineering and security teams to implement critical security enhancements, strengthen security configurations, and improve cloud security posture.

• Cross-Functional Collaboration: Build strong partnerships with engineering, infrastructure, and technology stakeholders to integrate security throughout the development lifecycle.

• Security Incident Response: Support the investigation and response to security incidents, identify root causes, and collaborate with teams to implement preventive measures.

• Third-Party Security Assessments: Conduct security assessments of third-party integrations, emerging AI tools, and technology solutions to ensure data protection, integrity, and regulatory compliance.

• Threat Modeling: Participate in threat modeling and architecture reviews to identify potential vulnerabilities and attack vectors early in the development lifecycle.

• Security Enablement: Guide and educate development teams on security best practices, vulnerability remediation, and effective risk mitigation strategies.

Required Qualifications and Skills

• Minimum of 5+ years of experience in information security, cybersecurity, or a related field, including at least 2+ years of hands-on cloud security experience.

• Strong understanding of cloud platforms and their security capabilities, particularly AWS, including:

  • IAM
  • EC2
  • VPC
  • ECR
  • ECS
  • EKS

• Strong understanding of Microsoft Azure services and cloud security configurations.

• Foundational knowledge of Google Cloud Platform (GCP) and its security capabilities.

• Hands-on experience with Cloud-Native Application Protection Platforms (CNAPP) or similar cloud security solutions, such as Wiz, Orca Security, Lacework, or Upwind.

• Proficiency in at least one programming or scripting language, such as Python or Go, for security automation and tooling development.

• Strong understanding of fundamental security principles, including:

  • Principle of Least Privilege
  • Defense-in-Depth
  • Security Monitoring and Threat Detection
  • Cloud Security Posture Management

• Experience with containerization technologies such as Docker and orchestration platforms such as Kubernetes.

• Strong analytical, troubleshooting, and problem-solving skills, with the ability to assess complex security risks and recommend effective mitigation strategies.

• Excellent communication and collaboration skills, with the ability to explain technical security risks and remediation approaches to both technical and non-technical stakeholders.

• Ability to work closely with engineering teams to promote security awareness and drive continuous improvement in security practices.

Preferred Qualifications

• Experience working with multi-cloud environments, including GCP and Oracle Cloud Infrastructure (OCI).

• Knowledge of multi-cloud networking, infrastructure security, and cloud architecture.

• Experience designing and implementing cloud-agnostic security solutions and frameworks.

• Exposure to emerging AI technologies and associated security risks.

Know more aboutDI: https://www.brillio.com/services-digital-infrastructure/

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

Equal Employment Opportunity Declaration

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.

#LI-AY1

$120,000 - $130,000 a year