Cloud Security Engineer

Role : Cloud Security Engineer

Introduction :

The role of Senior Cloud Security Engineer is vital in safeguarding our enterprise's confidential data by implementing robust security controls and addressing critical infrastructure challenges. With a focus on cloud security, this role requires expertise in cloud platforms such as Azure and AWS, coupled with extensive knowledge of cybersecurity principles and best practices. The successful candidate will play a pivotal role in ensuring the integrity, availability, and confidentiality of our cloud-based systems and data.

Responsibilities :

Security Architecture and Design :

- Analyze the organization's network and systems security requirements, contributing to the design of secure network and system architectures.

- Implement security controls to protect against the latest security exploits, vulnerabilities, and attack vectors, ensuring alignment with business objectives.

- Develop and maintain a comprehensive understanding of IT systems, data flows, applications, and technologies, identifying potential security weaknesses and recommending countermeasures.

Cloud Security Implementation :

- Implement and migrate software and hardware security upgrades and patches in cloud environments, ensuring adherence to internal security standards.

- Develop and implement cloud security controls, processes, and tools, leveraging automation technologies to enhance security posture.

- Continuously monitor cloud security operations, responding to security incidents and escalating as necessary.

- Collaborate with cloud service providers to address security concerns and ensure compliance with industry standards and regulations.

- Collaborate with the SOC team to enhance detection and response capabilities for cloud related security incidents.

O365 Security Implementation :

- Develop and implement comprehensive security strategies to protect Office 365 environments.

- Monitor, analyse, and respond to security incidents within O365, including phishing attacks, malware, and unauthorized access attempts.

- Configure and maintain security controls within O365, including Advanced Threat Protection (ATP), Data Loss Prevention (DLP), and Multi-Factor Authentication (MFA).

- Stay informed about the latest O365 security threats, vulnerabilities, and best practices.

Technical Input and Support :

- Provide technical input to projects and support the implementation of security measures within network services and infrastructure design teams.

- Collaborate with DevOps teams to integrate security best practices into cloud deployment, build, and test automation processes.

- Act as a subject matter expert on cloud security, providing guidance and recommendations to team members and senior leadership.

- Should have a good understanding of Endpoint security include EDR/XDR, DLP, MAM/MDM etc.

Security Evaluation and Reporting :

- Deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes), and Software as a Service solutions.

- Conduct assessments of cloud security posture, identifying areas for improvement and risk reduction, and overseeing vulnerability remediation efforts.

Research and Innovation :

- Stay abreast of industry trends and emerging technologies, implementing new procedures as needed to enhance cloud security infrastructure.

- Drive innovation in cloud security, evaluating and implementing new tools, technologies, and methodologies to strengthen security defenses.

Requirements :

Professional Experience :

- 5-6 years of overall experience in cybersecurity, with a focus on cloud security and O365 security.

- 3-4 years of experience in cloud security, with a focus on Office 365 security, cloud infrastructure security, and endpoint security.

Technical Skills :

- Extensive practical knowledge of Azure, AWS, and other cloud platforms.

- Experience with cloud platforms such as Azure, AWS, OpenStack and Google Cloud.

- Experience with O365 security controls including Advanced Threat Protection (ATP)

- Strong understanding of incident detection and response process and procedure

- Knowledge of industry standards and regulatory requirements related to cloud security (e.g., ISO 27001, NIST Cybersecurity Framework, GDPR).

- Managing security tools and technologies, such as SIEM systems, IDS/IPS, firewalls, encryption solutions, and endpoint security products.

Communication Skills :

- Excellent verbal and written communication skills, with the ability to convey complex technical concepts to diverse audiences effectively.

Education and Certifications :

- Bachelor's degree in information systems, computer science, engineering, or related field (or equivalent experience).

- Relevant certifications such as Microsoft Certified Azure Security Engineer Associate, AWS Certified Security

- Specialty Certification, Certified Cloud Security Professional (CCSP), Certified Ethical Hacker (CEH), etc. are a plus.

Personal Attributes and Soft Skills :

- Problem-solving skills: Ability to analyze complex problems, identify root causes, and develop effective solutions to improve processes and systems.

- Adaptability: Comfort with rapidly changing technologies, tools, and project requirements, and ability to adjust and thrive in dynamic environments.

- Creativity: Capacity to think innovatively and find novel approaches to optimizing or enhancing cloud security.

- Proactive Approach: Anticipation of potential issues, proactive identification of areas for improvement, and taking initiative to implement preventive measures.

- Team Player : Collaborative work style, willingness to share knowledge and expertise, and ability to work effectively as part of cross-functional teams.

- Strong Analytical Skills : Proficiency in analyzing requirements, understanding cloud architectures, and crafting technical solutions that meet business objectives.

- Effective Communication : Clear and concise communication skills, both verbal and written, to articulate ideas, collaborate with team members, and convey technical concepts to non-technical stakeholders.

- Time Management: Ability to prioritize tasks, manage multiple projects simultaneously, and meet deadlines in a fast-paced environment without compromising quality.

- Attention to Detail: Meticulous approach to configuring, testing, and documentation to ensure accuracy, reliability, and maintainability of systems and processes.

- Continuous Learning: Commitment to staying updated with the latest trends, technologies, and best practices in cloud security.

Security Implementation and Maintenance :

- Maintain high levels of security across cloud environments and ensure compliance with relevant standards.

- Implement proactive measures to mitigate risks and vulnerabilities.

Risk Management and Compliance :

- Identify and mitigate security risks, ensuring compliance with relevant regulations and standards.

Innovation and Continuous Improvement :

- Drive innovation in cloud security practices, implementing new technologies and methodologies to enhance security posture.

Collaboration and Communication :

- Foster collaboration across teams and communicate effectively with stakeholders to ensure alignment on security objectives.

- Provide guidance and support to promote a culture of continuous improvement.

Technical Leadership :

- Provide technical leadership and guidance on cloud security best practices, serving as a subject matter expert within the organization.

Documentation and Knowledge Sharing :

- Document cloud infrastructure configurations, processes, and best practices.

- Encourage knowledge sharing and contribute to the organization's knowledge base.

Note : The above Job Description outlines the primary responsibilities, requirements, and key result areas for the Senior Cloud Security Engineer role. The successful candidate will be expected to demonstrate expertise in cloud security, strong analytical skills, effective communication, and a proactive approach to security challenges.

Additional Information :

We are an equal opportunity workplace and an affirmative action employer. We are always committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status and we do not discriminate on the basis of such characteristics or on the basis of any other status that is protected by the laws or regulations in the locations where we work.