Cloud Security Engineer

Job Overview:


We are seeking a hands-on Cloud Security Engineer to design, implement, and maintain security controls across multi-cloud environments. This professional will establish cloud security baselines, guardrails, and best practices covering compute, networking, storage, identity, containers, and cloud workloads. The ideal candidate combines strong cloud security knowledge with scripting, automation, and governance experience. The role requires close collaboration with cybersecurity, cloud platform, infrastructure, engineering, project management, and leadership teams to strengthen the organization's cloud security posture and support the secure adoption of cloud technologies.


Required:

• Hands-on experience securing public cloud environments.
• Strong understanding of cloud security controls covering identity, networking, compute, storage, workloads, and data protection.
• Experience using scripting or automation to implement and manage security controls.
• Knowledge of cloud security best practices, risk management, vulnerability remediation, and incident response.

Preferred:

• Five or more years of cloud security engineering or related cybersecurity experience.
• Experience designing and implementing enterprise cloud security architectures.
• Hands-on experience with AWS, Microsoft Azure, and/or Google Cloud Platform security services.
• Experience implementing container and Kubernetes security controls.
• Experience with CNAPP, CSPM, CWPP, CIEM, or similar cloud security technologies.
• Knowledge of identity and access management, workload protection, data security, and DevSecOps.
• Experience with security automation using Python, PowerShell, Bash, Terraform, or similar technologies.
• Familiarity with regulatory and industry frameworks such as GDPR, PCI DSS, and ISO 27001.

Responsibilities:

• Design, implement, and maintain cloud security baselines, guardrails, and technical controls across AWS, Azure, and Google Cloud environments.
• Establish security requirements for compute, network, storage, identity, container, and cloud-native services.
• Define and implement container security controls across multi-cloud environments.
• Configure, maintain, and optimize Cloud-Native Application Protection Platforms (CNAPP) and related cloud security tools.
• Translate cloud security standards and architectural requirements into enforceable controls, governance processes, and engineering solutions.
• Automate cloud security monitoring, control enforcement, compliance validation, and remediation activities through scripting.
• Design and implement cloud security architectures that support scalability, resilience, and regulatory compliance.
• Strengthen identity and access management controls by applying least privilege, role-based access, and secure authentication practices.
• Develop workload protection strategies for cloud-hosted applications, infrastructure, containers, and data.
• Work with engineering and cloud platform teams to integrate security controls throughout the development and deployment lifecycle.
• Identify cloud vulnerabilities, configuration weaknesses, access risks, and compliance gaps, and coordinate their remediation.
• Design and improve threat-detection and incident-response processes for cloud environments.
• Develop secure communication protocols to protect sensitive data and maintain system integrity.
• Support SOC operations by improving cloud monitoring, alerting, investigation, containment, and response capabilities.
• Build governance frameworks for cloud security operations that align with corporate objectives and regulatory requirements.
• Communicate project risks, security strategies, incident status, compliance results, and KPIs to leadership and key stakeholders.
• Coordinate project activities, resources, risks, and dependencies to ensure the successful delivery of cybersecurity initiatives.
• Mentor cybersecurity team members and promote knowledge sharing and continuous improvement across the global security organization.