Cloud Security Engineer

Job Summary

We are seeking a skilled individual with expertise in DevSecOps practices, particularly within the AWS ecosystem. This role requires a strong understanding of AWS native security and infrastructure services, along with experience in infrastructure as code and third-party integrations.

Key Responsibilities

• Monitor logs and address issues not fully captured by the SOC team, especially those with lower security priority, and highlight them appropriately.
• Perform alert triage and remediation, contribute to incident response, and drive resolution of security incidents.
• Monitor for misconfigurations and other security issues within the environment.

Requirements

• AWS experience in DevSecOps.
• Extensive AWS native experience encompassing both Security and Infrastructure.
• Proficiency with key AWS services including:
  • IAM
  • Organizations
  • KMS
  • Cert Manager
  • Parameter Store
  • SSM/Systems Manager
  • Secrets Manager
  • GuardDuty
  • Inspector
  • Access Analyzer
  • CloudWatch
  • CloudTrail
  • Security Hub
  • Lambda/Serverless
• Infrastructure as Code (IaC) experience using Terraform (TF) and/or CloudFormation.
• Experience with IDP/IAM Integration, specifically with platforms like OKTA and Azure AD.
• Familiarity with 3rd Party Integrations such as:
  • Elastic (ELK)
  • Datadog
  • ServiceNow
  • Slack
  • Prisma Cloud
• Advanced knowledge of Amazon GuardDuty and Inspector.
• Strong Troubleshooting experience.