Cloud Security Engineer
Core
Design and implement AWS security architectures, controls, and compliance frameworks to secure cloud infrastructure, applications, and workloads.
Role type
Senior Cloud Security Engineer (AWS)
Builds
Secure AWS environments, CI/CD pipelines, and containerized workloads
Domain
Cloud Security / Financial Services
Required skills
AWS security architecture, IAM, VPC, encryption/key management, Terraform, Python, Bash, Kubernetes security, vulnerability assessment, incident response, compliance frameworks (CIS, NIST, ISO, SOC2, PCI-DSS, HIPAA)
Preferred skills
Multi-cloud experience (Azure, GCP), AWS Security Specialty certification, CISSP, Solutions Architect, DevOps Engineer
Technologies
AWS (Security Hub, GuardDuty, Macie, Inspector, WAF, Shield, KMS, CloudHSM, ACM, Secrets Manager, CloudTrail, CloudWatch, Config, EKS, ECS, Fargate), Terraform, CloudFormation, SIEM, SOAR
Responsibilities
Design and implement AWS security architectures aligned with compliance; Assess cloud security risks and enforce policies; Manage AWS IAM, Organizations, and Control Tower; Deploy and manage AWS-native security services; Configure and maintain encryption solutions; Integrate AWS logging and monitoring with SIEM; Secure networks via VPCs, Security Groups, and PrivateLink; Work with DevOps to embed security in CI/CD pipelines; Automate security with IaC and scripting; Apply container and Kubernetes security practices; Conduct vulnerability assessments and penetration testing; Drive compliance with industry frameworks; Develop and test incident response and disaster recovery plans; Train internal teams on cloud security.
Seniority
Senior, hands-on IC
