AWS Cloud Security Engineer I

Title: AWS Cloud Security Engineer I 

Location: Midtown / Remote

Org Unit: Security Identity and IT Business Cont 

Work Days:  

Weekly Hours: 35.00 

Exemption Status: Exempt 

Salary Range: $101,600.00 - $113,500.00  

*As required under NYC Human Rights Law Int 1208-2018 - Salary range for this role when Hired for NYC Offices 

Position Summary

This role focuses on the technical aspects of security within AWS cloud environment, requiring active participation in project-based work. The AWS Cloud Security Engineer collaborates closely with domain engineers and architects to drive innovation, evolution, and the design of Weill Cornell Medicine’s enterprise cloud platforms. This position offers a unique opportunity to engage with various facets of IT cloud infrastructure, leveraging risk analysis, industry expertise, and security standards to develop and implement robust security solutions that enhance our environment without compromising productivity. The role specifically emphasizes securing AWS services, including IAM, VPC, EC2, S3, RDS, and Lambda, ensuring compliance with AWS best practices and security frameworks.
 

Job Responsibilities

• Assists architects and senior engineers to implement security and identity environments and ensures related controls run optimally and effectively
• Identifies opportunities for efficiency improvements. Leads related efforts through automation and orchestration of repeatable tasks.
• Evangelizes security and secure practices while promoting and maintaining a favorable and positive work environment for yourself and others to assist in the overall mission of the medical college and hospital
• Assists in event monitoring and incident response activities. Includes assisting in creation and execution of playbooks.
• Assists in developing and maintaining metrics and reports to provide senior management insight and evidence supporting the effectiveness of security infrastructure, controls, projects, and processes
• Responsible for innovative security work identifying, deploying, and integrating security, identity, and related technologies.
• Maintains an awareness of ever evolving cyber threats and continuously updates skillset as needed.
• Performs other related duties as assigned.

Education

• Bachelor's Degree in related field

Experience

Minimum Requirements:

• Bachelor’s degree or four years of experience with security-related technologies
• At least three years of hands-on experience implementing and managing security controls in AWS environments according to industry best practices
• Proficiency in one or more scripting and programming languages, with a strong preference for Python (e.g., Python, PowerShell, Bash, Java, etc.)
• Experience configuring and analyzing logs from various systems and applications, particularly as it relates to event monitoring and incident response activities
• Knowledge of common networking and service protocols (e.g., TCP/IP, HTTPS, SSH) and cloud technologies (SaaS, PaaS, IaaS)

Highly Desired Requirements:

• Extensive experience with infrastructure-as-code principles and tools such as Terraform
• Relevant information security or certifications e.g., (ISC)² CCSP or CISSP, or SANS/GIAC GCLD, GPCS, GCPN, or GCSA
• Experience with Information Technology processes at a health care or academic institution and knowledge of related regulatory requirements (e.g., HIPAA, FERPA, PCI, etc.)

Knowledge, Skills and Abilities

• A strong aptitude for innovative and unconventional approaches in system and solution design
• Ability to deliver under tight deadlines.
• Ability to create and clearly present documentation, diagrams, and reports for technical and non-technical audiences
• Ability to proactively solve problems and make decisions with minimal supervision in a very demanding and high-pressure environment
• A strong team player that desires to educate and help people of various backgrounds and skill levels.
• Familiarity with SharePoint, Box, Confluence, ServiceNow or similar collaboration, documentation storage, and management systems.
• Excellent written and verbal communication skills on both technical and non-technical topics.

Licenses and Certifications

• AWS Solutions Architect: Associate.

Working Conditions/Physical Demands

• Works off-hours as needed.

<