Staff Cloud Security Engineer

🔒 Design, implement, and manage secure cloud environments using AWS services. 📜 Develop and enforce security policies, procedures, and controls for cloud resources, including IAM (Identity and Access Management) configurations. 🛠️ Create and maintain Terraform infrastructure-as-code modules to automate the secure deployment of cloud resources. 🕵️ Perform regular security audits, risk assessments, and vulnerability scans of cloud environments. 🤝 Collaborate with development teams to integrate security best practices into CI/CD pipelines and application development. 💻 Implement and manage endpoint security solutions to protect user devices and ensure compliance. 📡 Monitor cloud environments for threats, anomalies, and vulnerabilities, responding to incidents as needed. 🚀 Stay up-to-date on emerging security technologies, threats, and regulatory requirements, and recommend improvements to our security architecture. 👩‍🏫 Provide mentorship and guidance to Staff Engineers on cloud security practices.

📅 Experience in cloud security engineering or related roles, with a focus on AWS. 💡 Expertise in Terraform and infrastructure-as-code best practices. 🔑 Strong knowledge of IAM policies, roles, and permission models in cloud environments. 🛡️ Experience with endpoint security tools and strategies (e.g., antivirus, EDR, mobile device management). 📊 Proven track record of implementing security best practices in cloud environments, including network segmentation, encryption, and logging. ⚖️ Familiarity with compliance standards such as SOC 2, ISO 27001, GDPR, and/or HIPAA. 🤖 Strong scripting and automation skills (e.g., Python, Bash, PowerShell, Typescript). 💬 Excellent problem-solving, communication, and collaboration skills.

🎓 Relevant certifications, such as AWS Certified Security – Specialty, CISSP, or GIAC Cloud Security Essentials (GCLD). 📈 Experience with security monitoring and incident response tools (e.g., AWS GuardDuty, Security Hub, Detective, WAF, CloudTrail, or SIEM solutions). 📦 Knowledge of Kubernetes security and containerization tools (e.g., EKS, Docker, Aqua Security). 🛠️ Experience with zero-trust architecture principles and implementation.