Senior Cloud Security Engineer

Overview

Job Title: Senior Cloud Security Engineer 

 

Department: Technical 

 

Reporting To: Senior Director IS

 

Employment Type: Full Time  

 

Pay Transparency: 

The anticipated starting salary range for Philadelphia-based individuals expressing interest in this position is $120,000/yr. to $160,000/yr.

Salary to be determined by the education, experience, knowledge, skills, abilities and location of the applicant, as well as internal and external equity.

 

Audacy offers employees who are eligible for benefits with a comprehensive benefits package which includes: a health care coordinator, medical, dental, vision, mental health, telemedicine, flexible spending accounts, health savings account, disability, life insurance, critical illness, hospital indemnity, accident insurance, paid time off (sick, flex-time away/vacation days, personal, parental, volunteer), 401(k) retirement plan, student loan payment assistance program, legal assistance, life assistance program, identity theft protection, discounted home and auto insurance, and pet insurance.

 

Location: Philadelphia 

 

Work Arrangement: Hybrid 3 days in office required 

 

Overview:

At Audacy, our core values of Community, Curiosity, Creativity, and Courage guide our work. As an innovative and industry-leading multi-platform entertainment company, an Audacy senior security engineer must collaborate with a diverse community of creative engineers in order to facilitate the development of a resilient and streamlined security framework across a hybrid cloud environment. This courageous candidate should welcome the challenge of helping architect and secure new cloud and distributed cloud infrastructure.

As part of our small but capable team, you will have the opportunity to contribute your own creative ideas to the security stack used by the organization. This role will focus heavily on building new capabilities. Audacy continues to innovate with a "container-first" strategy, requiring the development of a security stack that can provide seamless visibility between on-premises and cloud workloads.

You will lead efforts to assess risks, develop innovative security solutions, and enforce compliance with industry standards and regulations, all while collaborating closely with cross-functional teams and mentoring junior engineers.

Responsibilities

What You'll Do: 

 

Cloud Security Architecture Design and Implementation:

• Design and implement robust security architectures for hybrid cloud environments, incorporating audit logs, cloud and data posture management tooling with other best practices, industry standards, and regulatory requirements.
• Deploy and configure security tools and technologies, including runtime detection and prevention tooling, SIEM, SOAR, access controls, and identity management solutions.

Security Monitoring and Incident Response:

• Develop and maintain monitoring systems for detecting and responding to security incidents and breaches in cloud environments.
• Conduct regular security assessments and review vulnerability scan findings to identify and mitigate risks.

Cost Optimization and Automation:

• Understand cloud usage patterns and trends, cloud pricing models, and cost management tools to ensure cloud cost optimization.
• Implement automation scripts and tools, integrated with existing and future security solutions, to streamline security processes, enhance incident response capabilities, and enforce security policies across cloud deployments.

Compliance and Documentation:

• Ensure compliance with relevant regulatory requirements (e.g., GDPR, CCPA, etc.) and industry standards (Familiarity with cloud security best practices and industry standards (e.g., CIS benchmarks, NIST SP 800-171)) pertaining to cloud security.
• Establish and maintain documentation for security policies, procedures, and controls, using insights from tools like Wiz, Tenable, Darktrace, and Security Scorecard.

Team Collaboration and Mentorship:

• Provide leadership in guiding and training internal teams on cloud security best practices, threat mitigation strategies, and compliance obligations.
• Foster a culture of security awareness and accountability throughout the organization, leveraging insights from CSPM, DSPM and other sources.
• Work closely with cross-functional teams, incl