Lead Cloud Security Engineer

Job Description

As a Lead Cloud Security Engineer, you will play a key role in designing, deploying, and maintaining a secure cloud application infrastructure that meets the business needs. Your responsibilities will include providing security guidance to the company, supporting innovation, and ensuring that the cloud computing infrastructure is secure. You will also be expected to have advanced skills in troubleshooting and administration, as well as knowledge of architecture, engineering, and design principles.
You will work closely with security leadership to assess the threat landscape and adapt quickly to protect the business from risk. With at least 5-7 years of experience in security and systems administration across various cloud infrastructure, including SaaS, IaaS, and PaaS, you will possess the necessary technical expertise to deliver applications at scale and with resiliency to support business initiatives. Along with strong analytical and critical thinking skills, you will need to be highly adaptable and able to meet change requests at a moment's notice. As the role involves interfacing with other business units, excellent communication and listening skills are essential. Overall, your goal is to maintain the level of rigor required to adhere to business direction while planning and designing policies and maintenance.

ESSENTIAL FUNCTIONS:   Reasonable accommodations may be made to enable individuals with disabilities to perform the essential duties.

Security Compliance:

• Implement and manage Security Compliance processes and strategies in alignment with Microsoft's and Azure's best practices.
• Review and analyze existing system controls for regulatory compliance and security policy adherence.
• Collaborate with teams to ensure compliance with ISO 27001, GDPR, SOC 2 and other relevant security compliance frameworks.
• Support audit processes through documentation and remediation of non-compliant findings.

Protective and Detective Controls:

• Deploy protective and detective measures by designing and implementing security controls.
• Work closely with the IT team to deploy and monitor Microsoft and Azure security solutions.
• Regularly monitor system logs, SIEM tools and network traffic for unusual or suspicious activity and interpret such activity and make recommendations for resolution.

Data Loss Prevention (DLP):

• Implement, manage, and fine-tune DLP policies, procedures, and tools to ensure data security.
• Regularly monitor and review DLP alerts and reports for policy violations and suspicious activities.
• Collaborate with the data governance team to maintain data classifications and categorization and apply DLP policies accordingly.

Cloud Security:

• Perform security design reviews to assess security implications for the introduction of new or differing technologies within the Azure environment.
• Regularly monitor Azure cloud environment for security breaches and investigate violations when they occur.
• Develop secure cloud architectures and solutions to assist businesses in migrating to the Azure cloud.
• Develop and implement policies, procedures, and associated training plans for cloud security administration and usage.

Supervisory Responsibilities: This position has no formal supervisory responsibilities.

MINIMUM REQUIRED QUALIFICATIONS:   

• Bachelor's degree in computer science, information assurance, MIS or related field AND
• Eight (8) years’ experience in cybersecurity as a practitioner and with at least 2-3+ years exposure with Microsoft, AWS, OCI.
• Equivalent combination of education and experience

Certificates and Licenses: One or more including CISSP, Microsoft Azure Security Engineer Associate- Specialty, and CompTIA Security+

OTHER REQUIRED QUALIFICATIONS: 

• Strong Linux and Windows support skills
• Experienced in cloud networking architecture and cloud operations
• Familiarity with tools such as Git, Jenkins, CloudFormation
• Network and encryption experience, including virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI)
• Experience with scripting languages such as Python, Ruby, PowerShell and JavaScript
• Familiarity with key security concepts/frameworks such as OWASP, CVE, and CVSS
• Experience integrating with native Microsoft services.
• Experience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR) and Gramm-Leach-Bliley Act (GLBA). Additionally, experie