Cloud Security Engineer

Stellenbeschreibung:

Implement Cloud Security Controls : Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards.
Assess Cloud Environments : Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations.
Deploy and Manage Security Tools : Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
Support Compliance Initiatives : Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation.
Automate Security Operations : Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls.
Conduct Cloud Security Reviews : Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
Collaborate with Engineering Teams : Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
Assist in Incident Response : Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
Communicate with Clients : Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Requirements

Hands-on experience securing AWS, GCP, or Azure environments.
Must have hands-on experience with Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM
Strong understanding of cloud security principles, IAM, network security, and compliance controls.
Proficiency in security automation using tools like Terraform, AWS CloudFormation, Python, or Bash.
Working knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA.
Experience with Microsoft security and identity ecosystem, including Azure, Microsoft Entra (Azure AD), EDR, MDM, and VDI environments.
Excellent troubleshooting and problem-solving abilities.
Strong written and verbal communication skills in English.
Ability to manage multiple client projects and interact directly with US-based clients.

Core Competencies

Demonstrates expertise in implementing and managing cloud security controls across AWS, GCP, and Azure, with a strong focus on compliance frameworks such as SOC 2 and ISO 27001. Proficient in security automation and incident response, ensuring robust security posture and effective client communication.