Cloud Security Engineer

Why should you join our team?

American AgCredit offers a unique opportunity to be a part of a national financial system supporting those who feed, clothe and fuel the world. We are a growing organization embracing collaboration and innovation while delivering transformative solutions. American AgCredit provides a cultivating environment where you truly make a difference for our customers and teams.

Benefits offered by American AgCredit:

• Commitment to agriculture and the communities we serve
• Family friendly work environment
• Investment in employee development
• Medical, Dental and Vision coverage
• Outstanding 401k – automatic 3% employer contribution, plus match up to 6%
• Generous Paid Time Off (Vacation accrued at 21 days annually, Sick Days accrued at 15 days annually, 12 paid holidays, plus 16 hours of volunteer time)
• Competitive Incentive Compensation Plan
• Disability & Life Insurance
• Employee mental, physical, and financial wellness programs
• The position is bonus eligible based on association and personal performance

Position will be posted until filled.

FUNCTIONAL OVERVIEW:

The Cloud Security Engineer specializes in providing security for cloud based digital platforms. Using their skills and expertise they play an integral role in protecting the Association’s data. In addition, this role will investigate, recommend, and implement innovative technologies or other methods that will enhance the security of the cloud-based environment for the Association.

As the subject matter expert (SME) they will leverage their knowledge, skills, and abilities to be an integral part of incident response.  This SME will have a proven understanding of cloud platforms such as Azure, AWS, and GCP. Leveraging knowledge of security standards and regulations is critical to success.

On an ongoing basis this role will be required to identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks. As a subject matter expert, collaboration, effective communication, and desire for strong partnerships is a requirement. This role will frequently provide general direction in the form of training and education to others within and outside of their group to promote safety and security.

ESSENTIAL DUTIES:

• Experience with monitoring and configuring Azure Security Center and/or other cloud platform specific security management systems.
• Experience developing, refining, and implementing a forward-looking cloud cybersecurity strategy for a growing organization.
• Provide security guidance during the design and deployment of enterprise cloud solutions.
• Act as a first-line security engineer, responsible for implementing and monitoring controls that protect cloud infrastructure and data.
• Work closely with infrastructure and operations teams to integrate security into CI/CD pipelines and cloud-native services.
• Performs threat hunting processes on a regularly established basis.
• Assists in identifying and remediating security incidents by analyzing and recommending configuration changes to bring systems or applications into compliance with established corporate procedures and industry best practices.
• Maintain/update documentation – diagrams, procedures, process, standards, etc. as it relates to cloud security.
• Coordinates response activities for security incidents.
• Assist with maintaining Incident Response Plan.
• Evaluate and recommend new security solutions/products to meet Association security objectives.
• Monitors and manages web and content filtering.
• Ensure cloud security controls align with financial regulatory requirements such as FFIEC, GLBA, SOX, and PCI-DSS guidelines.
• Partner with second-line risk and compliance teams to ensure alignment with enterprise risk appetite and control frameworks.
• Conduct research on emerging products, services, protocols, and standards relative to the cloud security arena.
• May participate as a member of the Security Risk Committee (may be rotating assignments).
• Review and evaluate service provider security reports.
• Performs other functions as assigned.

LEVELS OF SUPERVISION EXERCISED AND RECEIVED:

Exercises no supervision; regularly provides technical and security guidance along with training; makes independent decisions; working under general direction of the Lead Security Engineer.  Provides general direction to different groups within the organization in security.

TYPICAL EDUCATION AND EXPERIENCE:

• BA/BS degree, with emphasis on computer science, management information systems or business;