Description

As a Senior Security Engineer in Cloud Security, you will focus on architecting secure cloud infrastructure and automating security processes. This role involves collaborating with teams to enhance security measures and protect critical systems and customer data.

Requirements

• •5+ years as a Security Engineer
• •Deep AWS security expertise (IAM, VPC, Security Hub, GuardDuty, KMS, CloudTrail, Config)
• •Advanced Infrastructure as Code skills (Terraform required, CloudFormation)
• •Strong understanding of Kubernetes security (RBAC, network policies, Pod Security Standards)
• •Experience with container security tools (Falco, Trivy, etc)
• •Proficiency in Python and automation for security policy enforcement
• •Knowledge of security frameworks and cloud compliance (ISO 27001, SOC 2, CIS Benchmarks)
• •Experience with DevSecOps practices and security integration in CI/CD pipelines
• •Understanding of network security, TLS/mTLS, service mesh architectures
• •Multi-cloud experience (GCP, Azure) is advantageous
• •Knowledge of financial services regulations (MaRisk, BAIT, GDPR) is a plus

Tasks

• •Design and implement security controls for cloud infrastructure in AWS environments
• •Build and maintain Infrastructure as Code (IaC) security standards
• •Automate compliance validation for security standards
• •Develop cloud security automation using Terraform, CloudFormation, and Python
• •Implement and optimize Cloud Security Posture Management (CSPM) solutions
• •Create remediation workflows for security issues
• •Architect secure network segmentation and VPCs
• •Establish security groups and zero-trust network access solutions
• •Manage identity and access management (IAM) policies
• •Implement service control policies and least privilege frameworks
• •Monitor and respond to cloud security events using CloudTrail and GuardDuty
• •Integrate Security Hub and SIEM for enhanced security monitoring
• •Conduct security assessments of Kubernetes clusters and container registries
• •Evaluate serverless architectures for security vulnerabilities
• •Collaborate with platform and infrastructure teams to enhance cloud security
• •Drive initiatives for encryption strategies and secrets management
• •Implement data protection controls and evaluate cloud-native security tools

Tools & Technologies