Staff Cloud Security Engineer (Remote)

Allergan Data Labs is on a mission to transform the Allergan Aesthetics beauty business at AbbVie, one of the largest pharmaceutical companies in the world. Our iconic brands include BOTOX® Cosmetic, CoolSculpting®, JUVÉDERM® and more.

Our team has successfully launched a new and innovative technology platform, Allē, which serves millions of consumers, tens of thousands of aesthetics providers, and thousands of colleagues throughout the US. Since its launch in November 2020, Allē has delivered curated promotions, personalized experiences, and millions of consumers use it as part of their beauty journey. Now, we are looking for a Principal Cloud Security Engineer as we prepare to launch a new array of game-changing technologies on our successfully adopted platform.

We're looking for a Principal Cloud Security Engineer interested in working within a startup-oriented environment while having the backing of a very large company. If that's you, please read on.

As the Principal Cloud Security Engineer, you will report to the Director of Cloud Infrastructure Engineering, Security and DevOps, and will continuously collaborate with key stakeholders across the business to solve the most critical technical problems as a Cloud Security subject matter expert (SME). 

You Will

• Solve systematic problems for production security in a product, marketing and data science environment.
• Design, implement, and manage the security solutions program for cloud-based applications and infrastructure.
• Design and implement secure standards for technology including but not limited to Networking, Serverless, Kubernetes, Access Management (IAM/Service Accounts), Secure CI/CD, Cloud Security and Application Security.
• Create alignment between security engineering and various engineering disciplines on the Golden Path for security.
• Be responsible for leveraging security principles, practices and tools to improve the reliability, integrity and security of cloud applications.
• Partner with security teams both  internal and external to the organization to provide and solicit security guidance, drive adoption of security initiatives and transform them into actionable strategy.
• Stay current on all cloud architecture and security design, both for building new architectures and for adapting tried-and-true security tools and processes.
• Develop and implement security policies and procedures.
• Conduct security assessments and penetration tests.
• Create security reference architecture.
• Drive, monitor and respond to security incidents.
• Collaborate with other teams to ensure the security of cloud-based applications and infrastructure.
• Stay up-to-date on the latest security threats and technologies.
• Be a part of an Infrastructure Engineering team and DevOps practitioners that support the broader engineering organization.
• Lead technical initiatives and provide cloud security mentorship to other members of the team.

Required Experience & Technical Skills

• At least 8+ years in a Security Engineering discipline, plus 3+ years in a DevOps Engineering discipline
• Extensive experience as a cloud security engineer or similar role leading the development and implementation of cloud security controls
• CISSP or Industry recognized security certifications preferred but not required
• Strong foundation in cloud computing (AWS) and application security.
• Expert in threat modeling and secure architecture review
• Experience deploying and managing Developer Security Platforms and SIEM/CIEM solutions and tools
• Hands on experience in driving end-to-end security for cloud products - SAST, DAST, IAST, OSS scanning, pen testing
• Has authored and owned the compliance process for industry standard certification and frameworks such as: PCI HIPAA, SOC2, NIST CSF, SANS
• Subject matter expertise in multiple domains, including cloud security, web security, mobile security, AuthN/Authz protocols (SAML, JWT, OAuth, OpenID, Ping, Okta, etc.) and infrastructure security
• Familiar with building infrastructure to support Microservices and Event Driven Architecture using Serverless, Lambda, Docker, and Kubernetes
• Proficient with CI/CD pipelines, shell scripting and instrumentation/monitoring solutions (ie, Datadog)
• Proponent of infrastructure-as-code, least privilege access, observability and other DevOps best practices 
• Experience working with Software Engineers developing on serverless and containerized platforms
• Experience designing and building security services in a SecDevOps cloud operations model
• Experience translating compliance and security requirements into