Security Engineer (1-year renewable contract)

Primary Duties

• Conduct validation of security controls and effectiveness assessments across various cloud platforms and services.
• Create, execute, and sustain cloud security measures that align with established security frameworks and organizational security policies.
• Implement security-by-design methodologies throughout cloud infrastructure, applications, and technological deployments.
• Evaluate cloud environments against internal security standards, security baselines, and regulatory frameworks, pinpointing compliance deficiencies and opportunities for enhancement.
• Set up and oversee cloud-native security services, Identity and Access Management (IAM), monitoring tools, and automation solutions for security.
• Examine cloud configurations to uncover security vulnerabilities, misconfigurations, and compliance issues, driving necessary corrective actions.
• Work collaboratively with Security Architects and technology teams to convert security requirements and architectural plans into actionable technical controls and operational protocols.
• Assist with vulnerability management tasks, encompassing remediation progress tracking, risk evaluations, and validation of corrective measures.
• Engage in cloud security risk evaluations and propose suitable risk mitigation strategies.
• Perform security control assessments for new cloud services, infrastructure setups, applications, and technology deployments.
• Create and uphold cloud security standards, procedures, guidelines, and technical documentation.
• Support investigations of security incidents, offering technical expertise during containment, remediation, and subsequent activities.
• Automate security controls, compliance assessments, monitoring, and reporting processes where applicable.
• Remain informed about emerging threats, vulnerabilities, technologies, and best practices in cloud security, suggesting enhancements to the organization's cloud security framework.

Essential Qualifications

• A minimum of 3 years of experience in Cloud Security, Cybersecurity, Infrastructure Security, or a related security engineering position.
• Robust understanding of cloud security principles, architectures, and controls within Google Cloud Platform (GCP) and/or Microsoft Azure environments.
• Practical experience in implementing, configuring, and validating cloud security measures.
• In-depth knowledge of cloud-native security services, IAM, network security, encryption, logging, monitoring, and security operations.
• Solid understanding of security frameworks and standards including NIST Cybersecurity Framework, NIST SP 800-53, CIS Benchmarks, ISO 27001, and MAS TRM.
• Experience with vulnerability management, security assessments, configuration evaluations, and security assessment tools.
• Hands-on experience with Infrastructure as Code (IaC) and familiarity with DevSecOps practices and integrating security within CI/CD pipelines.
• Experience in cloud security automation, compliance monitoring, or security tools is a plus.
• Exceptional analytical, problem-solving, troubleshooting, and security risk assessment abilities.
• Capability to evaluate technical security issues, assess their business implications, and suggest suitable remediation steps.
• Excellent communication and documentation skills, with the ability to convey security risks and technical insights to both technical and non-technical audiences.