Sr. Cloud Security Engineer

Cloud Security Operations

Cloud Security Operations (Cloud Sec Ops) owns the operationalized governance of security operations and controls within the lululemon cloud infrastructure. This organization owns the 24/7 monitoring of the lululemon firewall policies/activities, network port volume (canaries), cloud provider security policies, and scan for policy variations within the lululemon landscape.

Cloud SecOps Sr Engineer - will work with architects on frameworks for cloud environments, systems, and tools. The Sr Engineer, will be the voice of security standards and policy best practices across the lululemonCloud space. They will work closely with security teams to establish policies and guardrails for the cloud environment and create the corresponding campaigns required to drive governance.

Cloud SecOps Sr Sec Engineer - will mature the tools, metrics, and dashboards required to build security awareness and Security Campaign directions. Sr Sec Engineer will also own the remediation best practices and creation of runbooks for service owners support in partnership with the Cloud SecOps PM.

Success will allow for monthly business reviews looking at range for policies and security trends that need to be proactively scanned for and alerted on prior to impact.

Cloud Security and Security escalations best practices from having worked within a Sec Operations field or organization. Working through ambiguous data rich environments and be able to synthesize security "So What" stories and justifications for general business partners.

Has worked within a security engineering capacity for a company that leverages cloud infrastructure from AWS, Google, Oracle, and Azure.

Business initiative documents, decks, and security awareness material. Security initiative (Weekly / Monthly) business review reports, and additionally programmatic situational awareness (Sit Rep) reports as needed. Budgeting forecast and financial guardrails for the organization in partnership with the Manager of Cloud SecOps.

Produce: security awareness material, automation or mechanisms for detection and mitigation of non-compliant actions in the environment. Deliver: security initiative (Weekly / Monthly) business review reports, and additionally programmatic situational awareness (Sit Rep) reports as needed. Manage and Drive: proactive security guardrails for the organization in partnership with the Manager of Cloud SecOps.

Mature and scale the technical operationalization of Cloud Security

Advises and directs other engineers within the company on the "so what" and "why" policies are in place. Assists the service teams within the company of prioritizing time commitments and program needs, in order to drive close to alerts. Builds roadmaps; to scale for the next phase. Ensures peers, partners, and stakeholders are aligned and tracking on the Cloud SecOps security mission. Building mechanisms to ensure transparency in operations and direction with stakeholders.