Cloud Security Engineer

Cloud Security Engineer

Dhaka Technologies Limited is seeking a highly skilled Cloud Security Engineer for one of our clients in Annapolis, Maryland. This is a Hybrid Full-Time position.

Essential Functions

Cloud Security Design and Implementation:

• Cloud Security Architecture: Design and implement cloud security controls and tools for IaaS, PaaS, and SaaS environments.
• Security Technologies: Hands-on experience with SIEM, network firewalls, host-based security, and security configuration.
• Containerized Platforms: Work with containerized and microservices architectures following industry best practices.
• Content Delivery Network (CDN): Integrate and secure CDN solutions.
• Incident Response: Investigate security incidents or breaches and develop strategies for response and recovery.

Deployment and Monitoring:

• Cloud Security Posture Management (CSPM): Utilize CSPM and vulnerability management tools to monitor and secure cloud environments.
• Managed Detection & Response (MDR): Collaborate with MDR providers to set up and investigate security alerts.

Collaboration and Documentation:

• Cross-Functional Teams: Work with product managers, engineers, and security teams to define requirements and deliverables.
• Technical Documentation: Document security architectures, controls, and incident response strategies.

Skills, Experience, & Capabilities:

Meet the following minimum qualifications:

• Education: Bachelor's degree in Engineering, Security, Technology, or a closely related field.
• Experience: At least 10 years of information security and engineering experience.
  • Substitution: A Master's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field can substitute for 1 year of experience.
• Cloud Security Expertise: 3-5 years of experience as a Cloud Security Architect or in a related role.
• Cloud Technologies: Strong understanding of IaaS, PaaS, and SaaS.
• Security Tools: Proficient in designing and implementing security controls and tools.
• Incident Management: Experience with security incident investigation and breach recovery.

Desired Qualifications:

• Industry Experience: Experience in a Health Exchange or its partners is a plus.
• Certifications: CompTIA Security+, CISSP, or other industry-recognized certifications.
• Server Administration: Experience with Linux and Microsoft server environments.
• Coding Knowledge: Familiarity with object-oriented coding (Java, Python,.NET, etc.).
• Standards: Familiarity with OWASP, IRS 1075, CMS MARS-E, NIST, and FISMA standards.
• Software & Services: Experience with the following is desirable:
• Cloudflare, Azure Sentinel, Tenable Nessus, Rapid7 Insight Vulnerability Management, Microsoft Defender, Microsoft Azure Cloud, Palo Alto PrismaCloud, Palo Alto Firewall, Palo Alto Panorama, Jira, Confluence, SolarWinds Orion, SolarWinds ServiceDesk, PowerShell, GitHub.

Application Process: Interested candidates should submit their resume and cover letter to View email address on click.appcast.io. Please include "Cloud Security Engineer Application" in the subject line.