Cloud Security Engineer

Responsibilities

• Design and implement security controls across cloud environments such as GCP, AWS, and Azure.
• Develop and maintain IaC modules and Ansible playbooks for secure infrastructure automation.
• Leverage CSPM and CNAPP platforms to manage cloud security posture, identity risks, and vulnerability remediation.
• Configure and optimize CASB, ZTNA, SaaS visibility, and data protection controls.
• Build automated guardrails, policy enforcement, and detection logic using cloud-native tools.
• Improve and maintain IAM governance, least privilege access, and identity lifecycle workflows.
• Enhance network security, workload protection, logging, monitoring, and encryption/KMS configurations.
• Deploy and manage Kubernetes security initiatives across clusters and workloads.
• Contribute to cloud incident response, threat investigations, and detection engineering efforts.
• Drive continuous improvement of cloud security tooling, automation, and operational processes.
• Ensure cloud environments align with CIS, NIST, and internal governance requirements.
• Keep cloud infrastructure current, make recommendations, and continually improve cloud security technologies.
• Work with analysts, engineers, and data scientists across the organization to continually improve cyber resilience.
• Take part in post-incident reviews and propose engineering resolutions to improve results in any future recurrence.

Requirements

• 3+ years of experience in DevSecOps or Cloud Security roles.
• Bachelor's degree in Computer Science, Information Security, or related fields.
• Hands-on experience securing cloud environments (GCP, AWS, Azure), including implementing IAM, network, workload, logging, monitoring, and encryption controls.
• Hands-on experience with Terraform and Ansible for provisioning and automating secure infrastructure.
• Familiarity with cloud security tools such as Wiz (for CSPM, CNAPP, and identity/security posture management) and Netskope (for CASB, ZTNA, and SaaS/cloud access security).
• Proficient in container security and Kubernetes (RBAC, secrets management, cluster hardening) and hardened Linux baselines.
• Working knowledge of image-building tools (e.g., Packer, AWS Image Builder) and cloud-native security tooling.
• Comfortable working in GitOps environments and integrating security into GitLab CI/CD pipelines.
• Ability to implement automated security guardrails, detection logic, and CI/CD security integrations.
• Understanding of cloud security standards and frameworks such as CIS, NIST, or ISO 27001.
• Strong collaboration, communication, and problem-solving skills; able to guide teams on secure practices.
• Nice-to-have: Python or Go scripting for automation.
• Relevant cloud certifications include: CCSP – Certified Cloud Security Professional, CCSK – Certificate of Cloud Security Knowledge, AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Azure Security Engineer Associate (AZ-500).

Benefits

• Culture - We put our people first and prioritize the well-being of every team member. We've built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another.
• Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
• Compensation - You'll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits.