Cloud Security Engineer

An organization is seeking a Cloud Security Engineer to take ownership of security across cloud workloads and SaaS migrations. This person will help design and implement cloud guardrails, improve cloud-security posture, support secure application migrations, and partner with cloud-platform and vulnerability-management teams., * Design, implement, and maintain security controls and guardrails for cloud environments.

• Take hands-on ownership of cloud-security posture and control implementation.
• Evaluate cloud workloads, applications, identities, configurations, and services for security risk.
• Support secure application, workload, and SaaS migrations.
• Establish security requirements throughout the migration lifecycle, from design through production.
• Use cloud-security posture management and cloud-native application protection tooling to identify and prioritize risks.
• Work with platform and application teams to remediate cloud-security findings.
• Partner with a principal engineer on cloud-security architecture and implementation.
• Collaborate with vulnerability-management, infrastructure, identity, application, and development teams.
• Help define cloud-security standards, patterns, controls, and operating procedures.
• Validate that implemented controls are working as intended.
• Provide technical guidance on cloud misconfigurations, excessive permissions, exposed services, insecure workloads, and related risks.
• Support a low-volume on-call rotation.

• Five or more years of relevant experience in cloud engineering, cloud security, infrastructure security, or a related technical discipline.
• Hands-on experience implementing cloud-security controls, guardrails, or security configurations.
• Experience securing Microsoft Azure, AWS, or Google Cloud environments.
• Understanding of cloud identity, networking, workload, data, configuration, and platform-security concepts.
• Experience supporting the security of a cloud workload, application, or SaaS migration.
• Ability to move between security design and hands-on implementation.
• Ability to explain specifically what was personally configured, deployed, tested, or remediated.
• Strong troubleshooting and cross-functional collaboration skills.
• Ability to work with cloud-platform, application, identity, and vulnerability-management teams.
• Willingness to work primarily onsite.