Cloud Security Engineer

The Expertise we're Looking For / Technical Skills

Over 5 Years of strong experience with cloud platforms (AWS) and native event systems.

Development experience with Python, or similar languages for backend and automation work.

Strong experience with CI/CD pipelines, infrastructure as code (Terraform, CloudFormation, OpenTofu), and DevOps practices.

Experience with Cloud Security Concepts, NIST Framework, Security Controls, CloudTrail, logging monitoring telemetry, and security event correlation.

Good to have - hands-on experience with CSPM (Cloud Security Posture Management) tools such as Wiz, Rapid7 (DivvyCloud), or similar platforms for continuous security monitoring and compliance.

Experience with SIEM tools (Splunk, Datadog, or similar) for security event analysis, threat detection, and incident response.

Strong expertise in Identity and Access Management (IAM) including role-based access control (RBAC), least privilege principles, IAM policy design, service control policies (SCPs), cross-account access patterns, and federation (SAML, OIDC).

Understanding of encryption techniques and standards including data-at-rest encryption (KMS, customer-managed keys), data-in-transit encryption (TLS/SSL), key rotation strategies, and compliance with encryption standards (FIPS 140-2, AES-256).

Experience with AWS Organizations, multi-account strategies, organizational units (OUs), consolidated billing, service control policies, and account governance frameworks.

Non-Technical Skills

Strong analytical thinking and ability to derive insights from complex data.

Excellent communication skills able to translate technical findings into business value.

Collaborative mindset with a passion for cross-functional teamwork.

Curiosity and a continuous improvement mindset always looking for better ways to do things.

Ability to prioritize and manage ambiguity in a fast-paced environment.

Growth mindset eager to learn, experiment, and continuously improve.

Preferred Skills

Exposure to AWS Cloud, Security Concepts Controls, Python, DevOps, CI/CD Pipelines.

Familiarity with ITSM tools (eg, ServiceNow), Incident Management and CMDB integration.