Information Security Engineer

Cloud Security EngineerThe primary duties and responsibilities of the Cloud Security Engineer are:* Assessing existing infrastructure and identifying threats* Providing recommendations on new infrastructure and threat modeling to assist in stakeholder decisions* Developing, solutioning, operating, maintaining, and supporting a secure cloud environment with technologies including but not limited to: servers, storage, network services, enterprise applications, cloud platform support, automation, CI/CD, managing cryptography and encryption, IAM, threat detection, logging, PKI, SaaS, and PaaS* Keeping cloud infrastructure current, making recommendations, and continually improving cloud security technologies* Analyzing, designing, and developing programs, shell scripts, tests, and infrastructure automation capabilities* Developing security standards in partnership with Engineering, Infrastructure Services, and Application Development* Representing the cloud security team in change control activities and ensuring proposed changes are in alignment with security best practices* Staying abreast with security standards and emerging vulnerabilities/threats to proactively resolve/remediate/mitigate* Engage in digital forensics to investigate breaches or security incidents in the cloud* Collaborate with Disaster Recovery and Business Continuity Teams and play a pivotal role in developing, testing, and refining disaster recovery plans tailored for cloud environments* Empower the Security Compliance and Data Protection Team to audit cloud environments to ensure compliance and pinpoint areas of improvement; using metrics and KPIs to drive and further Security Posture Initiatives* Establish and maintain a feedback mechanism where security measures are not only implemented but also refined based on feedback to enhance security protocols continuously