Senior Security Engineer — AWS Cloud
We are seeking a Senior Security Engineer — AWS Cloud to join our client-facing team, working independently and proactively to elevate cloud security standards. This fully hands-on role involves daily collaboration with senior leadership, prioritizing and resolving security issues, and continuously improving security processes and pipelines.
Responsibilities
- Review and investigate Cloud security findings detected by CrowdStrike SOC and triage findings
- Work with various teams to remediate vulnerabilities and misconfigurations
- Address other security-related issues as they arise
- Update weekly and monthly security statistics for leadership
- Maintain and update Cloud Security processes including integrations, playbooks, custom alerts and documentation
- Provide evidence and documentation for yearly audits
- Triage Application Security vulnerabilities
- Triage Kubernetes Security vulnerabilities
Requirements
- Minimum 3 years of working experience in cloud security or related roles
- Knowledge of AWS Cloud Security, its components and networking
- Expertise in AWS architecture and services such as IAM, VPC, Security Group, EC2, Lambda, ECR, ECS, S3, CloudTrail, ACM, DynamoDB, Redshift and KMS
- Skills in CI/CD pipelines for Security scans including creation, usage, architecture and maintenance
- Proficiency in Terraform and GitHub for infrastructure management
- Background in Kubernetes architecture, security and deployment using Terraform
- Competency in CrowdStrike, Security Operation Center and Snyk
- Familiarity with Codefresh, Argo CD and PerimeterX
- Understanding of SUMO Logic and Okta
- Capability to detect gaps in security coverage and provide solutions
- Investigation of security events across platforms and preparation of detailed reports
- Proven ability to work directly with clients and senior leadership without supervision
- Excellent verbal and written communication skills
- English proficiency at B2 level or higher for direct communication with US-based customer teams
Nice to have
- Application security experience
- Familiarity with DNS
- Skills in Python
- Background in Azure and GCP Cloud security for implementing security alerting and remediation
- Experience with Red Team exercises
