Role: Cloud Security Engineer

Location: Irvine, CA 5x a week onsite - RELOCATION REIMBURSEMENT AVAILABLE

Compensation: $140,000-190,000 base

The client is one of the world's largest manufacturers of network products and IoT/smart home devices.

Position: Cloud Security Engineer

The Cloud Security Engineer is responsible for securing web applications, cloud services, and their associated infrastructure. This role involves conducting penetration tests, managing security incidents, and performing regular AWS security audits to ensure compliance with best practices and industry standards. The engineer will also address customer-reported vulnerabilities, create security policies, and assess threats and risks to effectively mitigate potential security issues. A key part of this role is working closely with development teams to integrate security measures into DevOps workflows. Additionally, the Security Engineer will play a vital role in promoting security awareness throughout the organization.

Key Responsibilities:

• Penetration Testing : Conduct penetration tests on web applications and cloud services to evaluate and improve security measures.
• Incident Response : Take immediate action in response to security incidents, leading investigations, implementing containment and remediation, and performing post-incident analysis.
• Cloud Security Auditing : Perform routine AWS security audits to ensure adherence to best practices and compliance with relevant security standards.
• Customer Vulnerability Management : Manage vulnerabilities reported by customers, providing remediation advice, and tracking the progress of fixes with the R&D team.
• Security Policy and Documentation : Develop and maintain comprehensive security policies and procedures. Document security incidents and the corresponding mitigation steps.
• Threat and Vulnerability Assessment : Conduct ongoing evaluations to identify, analyze, and mitigate risks and vulnerabilities across systems, networks, and applications.
• Collaboration with Development Teams : Work closely with development and operations teams to embed security into DevOps practices, automate security testing, and conduct vulnerability scans.
• Security Awareness Training : Collaborate with teams to design and deliver security awareness training, ensuring adherence to best practices and reducing the likelihood of insider threats.

Required Qualifications:

• Education : Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Experience : Proven experience in a Security Engineer role or a similar position.
• Penetration Testing Expertise : Extensive experience in cloud penetration testing, particularly within AWS environments, and proficiency with penetration tools like Burp Suite, Kali Linux, and Metasploit.
• AWS Knowledge : Strong understanding of AWS, including security management, configuration, and best practices for daily security management and audits.
• Cloud Auditing : Hands-on experience in auditing cloud environments and optimizing security frameworks.
• Scripting Skills : Proficiency in scripting or programming languages such as Python, with the ability to write Proof of Concept (PoC) or exploit scripts to validate vulnerabilities.
• Certifications : Possession of security certifications such as CISSP, CEH, or OSCP is preferred. Cloud security certifications like AWS Certified Security – Specialty or Google Cloud Certified - Professional Cloud Security Engineer are a plus.
• Communication Skills : Ability to communicate technical concepts effectively to both technical and non-technical stakeholders.
• Collaboration : Capability to work independently while maintaining close collaboration with security and development teams.
• Attention to Detail : Strong focus on accuracy in security testing and remediation, ensuring thorough addressing of vulnerabilities.

Soft Skills:

• Strong communication and interpersonal skills.
• Ability to work both independently and as part of a cross-functional team.
• High attention to detail with a commitment to upholding security standards.

Benefits:

• Salary Range : $140,000 - $190,000
• Perks : Free snacks, drinks, and lunch on Fridays
• Healthcare : Fully paid medical, dental, and vision insurance (partial coverage for dependents)
• Retirement : Contributions to 401k plans
• Compensation : Bi-annual performance reviews and annual pay increases
• Wellness : Health and wellness benefits, including a free gym membership
• Team Building : Quarterly team-building events