The Cloud Security Engineer is responsible for designing, implementing, and managing security solutions in our cloud infrastructure. This role requires a deep understanding of cloud security best practices, a proactive approach to identifying vulnerabilities, and a commitment to ensuring the security and compliance of our cloud environments.

What will you provide?

• Develop and implement security strategies and solutions for Azure, AWS, and Google Cloud environments, focusing on network security, identity and access management, and data protection.
• Leverage automation, Infrastructure as Code (IaC), and continuous compliance strategies. Interface with DevSecOps teams to define and implement security and compliance requirements for production CI/CD pipelines.
• Conduct risk assessments and vulnerability analyses for cloud infrastructure, identify potential threats, and recommend appropriate mitigation strategies.
• Implement and manage Microsoft Purview for data governance, ensuring effective data classification, encryption, and compliance with data loss prevention (DLP) policies.
• Utilize Microsoft Intune for endpoint management, ensuring secure and compliant configurations across all devices.
• Collaborate with IT teams to implement security measures within Azure and Microsoft 365, including setting up multi-factor authentication (MFA), configuring security groups, and managing conditional access policies.
• Work closely with other IT teams to integrate security practices into development and operational processes, providing guidance and training on cloud security best practices to stakeholders.
• Oversee SOC activities in monitoring cloud environments for security incidents and responding to alerts. Provide leadership and ensure effective incident response and remediation, staying informed of all incidents and ensuring the SOC MSSP meets performance expectations.
• Utilize automation tools and scripting (e.g., PowerShell) to streamline security processes, manage security configurations, and enhance overall efficiency.
• Ensure cloud environments comply with industry standards, regulations, and best practices (e.g., HIPAA, NIST), and assist in maintaining compliance certifications and preparing for audits.
• Create and maintain comprehensive security policies and procedures for cloud operations.
• Develop and deliver targeted security training and awareness programs to ensure staff are well-informed and compliant with best practices.
• Deep knowledge of cloud security best practices across major platforms (Azure, AWS, Google Cloud).
• In-depth understanding of risk management and vulnerability analyses of cloud infrastructure.
• Proficiency in network security, identity and access management, and data protection within cloud environments.
• Ability to create and deliver effective security training and awareness programs.
• Experience in leading cross-functional incident response efforts, including coordination with legal, compliance, and executive teams.
• Proficiency in using automation tools and scripting languages (e.g., PowerShell) to enhance security processes and efficiency.
• Ability to work in and manage ambiguity, including dealing effectively with issues that do not always have a process, system, or solution in place.

Education and Experience Requirements

• Minimum of 5 years of experience in cloud security, with hands-on experience in managing and securing cloud environments across Azure, AWS, and Google Cloud is required.
• One or more of the following security certifications is required:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer.
• Experience and expertise is required in the following core areas:
  • Implementing and/or materially maturing an existing Cloud Security program.
  • Data classification, encryption methodologies, managing data loss prevention, and compliance standards.
  • Knowledge of mobile device management (MDM) and mobile application management (MAM) principles, ensuring secure configurations and compliance across diverse endpoints.
  • Conducting risk assessments, performing audits, and leading incident response efforts.
  • Developing and maintaining security policies and procedures.
  • Recommending and implementing security tools specific to cloud environments.
• Minimum of 5 years of experience in cybersecurity & ensuring standards with HIPAA compliance is required.
• Familiarity with NIST standards and HITRUST MyCSF certification is preferred.
• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field is preferred.