Summary:
We seek a highly skilled and experienced Senior Cloud Security Engineer to join our team. The ideal candidate will have a strong background in AWS Cloud Security, OCI Cloud Security, IAM, Compliance Management, firewalls, VPNs, Cloud Security frameworks, and Vulnerability Management. This role involves designing, implementing, and maintaining security controls and best practices to protect cloud environments and ensure compliance with industry standards and regulations.
Responsibilities:
- Design and implement robust security architectures for AWS and OCI cloud environments.
- Experience in multi-cloud security strategies.
- Configure and manage firewalls, VPNs, and intrusion prevention systems to ensure secure connectivity.
- Manage and enhance Identity and Access Management (IAM) solutions, ensuring least privilege access control.
- Develop and enforce cloud security policies, standards, and procedures to maintain compliance with industry regulations (ISO 27001, NIST, CIS, GDPR, etc.).
- Oversee firewall configurations and network security controls to prevent unauthorized access and cyber threats.
- Conduct vulnerability assessments, penetration testing, and remediation of security risks.
- Collaborate with DevOps and cloud engineering teams to integrate security best practices into CI/CD pipelines.
- Monitor and respond to security incidents and threats, providing timely resolution and reporting.
- Stay updated with emerging threats, security trends, and technologies to continuously improve the organization’s security posture.
- Provide guidance and training to internal teams on cloud security best practices.
Required Skills:
- Bachelor’s/Master’s in Computer Science, IT, or a related field.
- 5-7 years of experience in cloud security engineering, preferably in mid to large-scale enterprise environments.
- Strong expertise in AWS security services (IAM, Security Hub, GuardDuty, WAF, KMS, etc.).
- Experience with Oracle Cloud Infrastructure (OCI) security tools and frameworks.
- Hands-on experience with SIEM solutions (Splunk, Azure Sentinel, etc.).
- Proficiency in vulnerability management tools (Qualys, Nessus, etc.) and penetration testing techniques.
- Strong understanding of firewall configurations, VPNs, and network access controls.
- Knowledge of compliance frameworks such as ISO 27001, NIST, CIS, PCI-DSS, and GDPR.
- Familiarity with automation and scripting (Python, Terraform, PowerShell) for security operations.
- Strong analytical and problem-solving skills, with the ability to handle security incidents effectively.
- Relevant certifications (AWS Certified Security Specialty, CISSP, CISM, CEH, or equivalent) are preferred.
- AWS Certified Solutions Architect, Azure Solutions Architect, and Oracle Cloud Architect Associate certifications are preferred.