Cloud Security Engineer

Job Description :

Responsibilities :

- Provide hands-on technical security engineering and security expertise in the analysis, assessment, development, and evaluation of security solutions and architectures to secure systems in the cloud (AWS, Azure, or GCP).

- Implement security controls and fine tune / baseline based on the risk criteria and continuously evaluate cloud infrastructure for new services / new emerging technologies to understand security requirements and implementation techniques.

- Creation of automated tooling for cloud platforms to streamline/enhance security processes.

- Develop and maintain cloud security standards in partnership with the cloud governance team.

- Automate remediation and implement controls to avoid misconfiguration and ensure compliance.

- Create and maintain Infrastructure as code to support the team with regard to automation capabilities.

- Collaborate with the cloud architecture and operations teams to automate and address security concerns.

- Document and prepare Standard Operating Procedures based on security architecture.

- Identify, analyze, and permanently fix repeat incidents (problem management).

- Follow up and coordinate with other cross-functional teams - network, infra, and security teams.

- Handle multiple critical projects along with daily tasks, create security policies to guardrail, and keep the bank's cloud environments secure.

- Create, discuss, and release dashboards and reports periodically to management, business owners and relevant stake holders including the internal and external auditors.

- Plan and Scheduling of infrastructure for calendar assessments, following up with application owners for details, tracking closures of the findings, etc.

- Coordinate and support vendors/partners w. t various project tracks related to cloud security.

Requirements :

- 5+ years of experience in technical security engineering and security expertise in the analysis, assessment, and development

- Bachelor's or Graduate Degree in any discipline.

- Technical proficiency in AWS and Azure, including solution architecture and relevant experience with AWS, Azure, and Google Cloud Platforms.

- Knowledge of the Cloud Security Alliance (CSA) framework.

- Knowledge of security concepts (data, network, and cloud security).

- Knowledge and/or experience of cloud security provider solutions, e. AWS security solutions, Azure security solutions, GCP security solutions.

- Expertise in Cloud automation (Ansible, Ansible Tower, Terraform, Cloud Formation, Python, etc.

- Expertise using containers and serverless computing (Docker, Kubernetes, etc. ), CI/CD pipeline tools such as Jenkins