Senior Cloud Security Engineer, Horizon3

• Strong experience with modern SDLC tools and branching strategies
• In-depth knowledge of Terraform and Gitlab
• Deep knowledge of AWS services and security architecture
• Strong understanding of AWS security and data security principles
• Experience with threat modeling and risk assessments
• Excellent communication skills and ability to explain technical concepts to non-technical stakeholders
• Ability to work independently and as part of a team, and a strong sense of ownership and accountability
• Knowledge of compliance standards such as SOC2, GDPR, ISO27001, FedRAMP, etc
• Familiarity with cybersecurity frameworks such as NIST, CIS, and MITRE ATT&CK
• Knowledge of Data Loss Prevention (DLP) including data classification, identification, and protection
• Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as: (Logs and events processing, Incident Management, detection, response tool development, etc.)

Desirable

• We are seeking a skilled Sr. Cloud Security Engineer with strong focus on AWS to join our growing team
• The ideal candidate will be a self-starter with a "learn it all" attitude and a strong desire to stay current with the latest trends and technologies in the field
• In this role, you will be responsible for designing, implementing, maintaining, and validating security solutions for our AWS cloud infrastructure
• Your role will involve working closely with development and engineering teams to ensure secure cloud architecture and implementation
• Design and implement security controls across our AWS environment (e.g., IAM, SCPs, VPC security, S3 bucket policies, security groups, key management, logging)
• Continuously monitor and improve cloud posture by managing and tuning services like GuardDuty, Security Hub, AWS WAF, CloudTrail, and Inspector
• Develop and maintain security policies, standards, and procedures to ensure compliance with industry standards such as SOC2, GDPR, ISO27001, FedRAMP, etc
• Evaluate and recommend new security technologies, tools, and techniques to improve the security posture of our AWS cloud infrastructure
• Implement and maintain Gitlab CI/CD pipelines and tools for automated security testing and scanning of AWS resources
• Conduct threat modeling, architecture reviews, and risk assessments for cloud deployments and new features
• Implementing security features and monitoring tools, performing periodic security assessments to verify best practice configuration and secure systems hardening in the cloud
• Responding swiftly to new and emerging security threats and vulnerabilities with the cloud
• Where required, investigate suspected attacks and help manage security incidents including providing post-mortem analysis, identify causes, develop solutions and preventive measures
• Implement process and technologies that reduce cloud security deficiencies and help develop creative reporting mechanisms including metrics/key themes that communicate risk to business owners and leadership
• Participate in development and implementation of cloud security standards and cloud service certification
• Provide subject matter expertise to assist with building detective controls for malicious activity within the AWS environment
• Define and enforce identity and access management (IAM) best practices, including least privilege policies, federated identity, role-based access control (RBAC), and automated remediation
• Demonstrate a commitment to integrity, process improvement, and customer satisfaction