Sr Cloud Security Engineer
Core
Securing and operating cloud environments across AWS, Azure, and GCP by evaluating designs, operating security tooling, and driving remediation of security findings.
Role type
Senior Cloud Security Engineer
Builds
Secure cloud infrastructure and application security posture for BJ's Wholesale Club
Domain
Cloud Security (AWS, Azure, GCP)
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Cloud security controls (IAM, encryption, logging, monitoring), Cloud engineering (AWS, Azure, GCP), Scripting/Automation (Python, Bash, PowerShell), Infrastructure-as-code (Terraform, CloudFormation, ARM, Puppet, Ansible), Secure SDLC, Security frameworks (NIST, PCI DSS, CIS, ISO 27001)
Preferred skills
CSPM tooling operation, Application security tools (SAST, SCA, DAST), Certificate management platforms (DigiCert, AppViewX), Edge security (Akamai), Containerization (Docker, Kubernetes)
Technologies
AWS, Azure, GCP, Terraform, CloudFormation, ARM, Puppet, Ansible, Python, Bash, PowerShell, Akamai, Docker, Kubernetes
Responsibilities
Perform security architecture and design reviews for cloud services and applications; Evaluate cloud designs for security controls including IAM, encryption, logging, and network protections; Implement, operate, and tune security tooling for visibility, monitoring, detection, and response; Own triage, validation, prioritization, and remediation tracking of cloud security findings; Partner with teams to ensure effective and sustainable remediation; Identify opportunities to automate repetitive security tasks; Support infrastructure hardening and patch compliance; Perform risk-based analysis of vulnerability findings; Review application designs for Secure SDLC alignment; Support application security activities including static, dynamic, and dependency scanning; Provide operational support for Web Application Firewalls (WAF) and edge controls; Support certificate lifecycle management; Develop and maintain security documentation, runbooks, and SOPs; Contribute to metrics and reporting on cloud and application security risk.
Seniority
Senior, hands-on IC
