Senior Associate Cloud Security Engineer

Career Category

Information Systems

Job Description

HOW MIGHT YOU DEFY IMAGINATION? 

THE AMGEN CAPABILITY CENTER IN LISBON, PORTUGAL (ACCP) will be home to over 300 multi-national and multi-cultural employees, representing a broad range of cross functional capabilities, including Commercial, General and Administrative, Research and Development and more. The ACCP will offer rich career growth and development opportunities, regional and global exposure and the opportunity to LIVE, WIN and THRIVE in one of Europe’s most attractive cities. 

 

The Amgen Capability Center Portugal will be temporarily located at the Maleo – Saldanha, Av. da República 18, 1050-191 Lisbon. We’re already gearing up to have our brand-new permanent office ready in the vibrant city center of Lisbon by the spring of 2022. 

 

Cloud Security Sr. Associate IS Engineer 

 

LIVE 

What you will do 

Amgen is seeking a Cloud Security Engineer to join Amgen’s Cloud Security organization who will be reporting into the Global Information Protection Organization in Amgen and will be based in Lisbon, PRT, at Amgen’s new Capability Center. 

As a Cloud Security Engineer, you will be providing remediation strategies, and executing project activities to complete tactical objectives. You will play a key role in designing, deploying, and maintaining solutions, automate security assessments, audits, policy and standard enforcements, and more. 

• Continuously assess cloud configurations using automated compliance and vulnerability management tools to identify misconfigurations and security risks. 

• Conduct threat modeling and risk assessments for new cloud solutions and emerging services, ensuring alignment with organizational risk appetite and compliance standards. 

• Develop and maintain Infrastructure-as-Code (IaC) templates (e.g., Terraform, CloudFormation) with embedded security guardrails and policy-as-code enforcement. 

• Integrate cloud-native logging and monitoring services (e.g., AWS CloudTrail, Azure Monitor, GCP Cloud Logging) into centralized SIEM platforms for threat detection and analysis. 

• Collaborate with DevOps and application teams to embed security into CI/CD pipelines and implement automated scanning, secrets management, and dependency validation. 

• Respond to cloud-related security incidents, conduct forensic investigations, and implement remediations to prevent recurrence and strengthen detection mechanisms. 

• Develop and maintain technical documentation, runbooks, and operational standards for cloud security processes, controls, and procedures. 

• This position requires after hours responsibilities and may require some travel. 

WIN 

What we expect of you 

We are all different, yet we all use our outstanding contributions to serve patients. The professional we seek is a versatile person with these qualifications. 

• Strong command of security foundations, e.g. authentication, authorization, confidentiality, integrity, and availability.  

• Solid understanding of security principles such as the principle of least privilege or economy of mechanism. 

• Good working knowledge of cryptography, e.g. key management, symmetric, and asymmetric encryption. 

• Comprehensive experience with Amazon AWS, understanding of Identity and Access Management