CVP, Cloud Security Engineer

Location Designation: Hybrid - 3 days per quarter 

The Cloud Security Engineer will be a key member of our Cloud Security Team, responsible for designing, building, and maintaining cloud security tools and configurations. This is a critical role in improving our cloud security posture and ensuring our cloud security configurations do not expose us to unnecessary risks.   In addition, this engineer also supports the cloud activities of other security teams, including Terraform development and implementation.  This is a hands-on role requiring the ability to operate tools and navigate the cloud environment, acting as an escalation point and supporting initiatives.

The Cloud Security Engineer will work closely with other engineering teams, particularly the Cloud Platform team, during the design and build phases of upgrades or new service implementations. The engineer will also coordinate with the Cloud Security Operations team to gather input for the engineering process and ensure operational readiness through a defined handoff requirements process.

Collaboration is key for this role. The engineer will need to clearly articulate the need for cloud security hardening to business teams, the Cloud Platform team, and all facets of the security organization. An ideal candidate should demonstrate experience driving cloud security risk programs from detection to remediation. The ideal candidate should also be prepared to demonstrate prior success in turning over projects to operations.

This role requires identifying and proposing solutions to cloud security challenges, such as security principles, segmentation, configuration, and policies, using tools covering CSPM, CIEM, and other AWS native tools.  Deep knowledge of cloud technologies is essential for success in this role as often there are several competing approaches available to resolve a particular risk. This engineer should possess the expertise to recommend the most comprehensive approach that imposes the least impact to business teams.

Along with the responsibilities outlined above, some specific responsibilities will include (but are not limited to):

• Understanding cloud configuration elements, primarily focused on but not limited to AWS.
• Working within Cloud Security tools such as CSPM, CIEM, etc.
• Having a deep understanding of cloud networking and general networking concepts.
• Expert level IAC development in Terraform. The candidate should be capable of deploying security applications organization-wide in Terraform with minimal guidance.
• A strong understanding of DevOps and CI/CD principles.
• Supporting other teams in implementing cloud services through guidance, Terraform and other activities.
• Working within the SLO’s and SLA’s defined for incident and request handling.
• Identifying and tailoring cloud security controls to the NYL environment.
• Identifying operational efficiencies and improvement opportunities.
• Ensuring SOP documentation is updated after updates to existing tools or new implementations.
• Collaborates with peers to solve unique and complex issues; requires conceptual and innovative thinking and education and/or experience to develop solutions.
• Supports security customers in the implementation, maintenance, and support of elements of the infrastructure.
• Can quickly grasp customer requirements, anticipates changing business needs and challenges, and their subsequent impact on the technical direction of a solution.

Additional Requirements:

Minimum of five years of experience in a role that is responsible for the support