Senior Cloud Security Engineer

JOB SUMMARY

The Senior Cloud Security Engineer will be responsible for designing, implementing, and managing robust security solutions for our cloud infrastructure. This role requires a deep understanding of cloud security best practices, risk management, and compliance frameworks. The Senior Cloud Security Engineer will work closely with cross-functional teams to ensure the security of our cloud environments and protect sensitive data. The role involves leading and guiding a team, strong problem-solving skills, attention to detail, and effective communication are essential for collaborating across teams and implementing robust security practices


KEY RESPONSIBILITIES
People Management

• Leading the team, creating action plans for cloud security deliverables, and evaluating team performance for continuous improvement.
  
• Provide guidance and mentorship to junior security engineers and team members.
  

Security Posture Management

• Lead the design and implementation of infrastructure security hardening for cloud environments (AWS, Azure, GCP).
  
• Implement new cloud features and services as required.
  
• Ensure the overall security posture of cloud environments is maintained and continuously improved.
  
• Ensure all cloud resources are well-secured.
  
• Develop and enforce security policies, standards, and procedures for cloud services.
  
• Conduct a cloud user access review.
  

Compliance and Governance

• Ensure compliance with relevant regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI-DSS).
  
• Maintain up-to-date documentation of security policies, procedures, and compliance status.
  

Risk Management

• Identify, assess, and prioritize security risks associated with cloud services and applications.
  
• Develop and implement risk mitigation strategies and ensure they are effectively communicated to stakeholders.
  

Collaboration and Learning

• Collaborate with cross-functional teams, including DevOps, Engineering, and
  
• Compliance, to ensure security is integrated into all aspects of cloud operations.
  
• Communicate security risks and recommendations to senior management and other stakeholders clearly and effectively.
  
• Evaluate and implement security tools and technologies to enhance cloud security posture
  
• Stay current with emerging cloud security trends, threats, and technologies.
  

Incident Management

• Provide Level 3 technical support and resolve security issues through root causE analysis.
  
• Participating in global follow-the-sun support, including after-hours on-call duties
  
• Analyze and remediate security incidents, breaches, or threats.
  

Documentation:

• Provide clear task breakdowns and time estimates.
  
• Document configurations, processes, and incident resolutions.
  

Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records. Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.

Requirements

 

• Bachelor's degree in Computer Science, Information Technology, or related fields.
  
• At least 2 years of experience in cloud infrastructure and security, preferably in fintech or financial institutions.
  
• 2-3 years of experience in the following skills/tools:
  

• Identity and Access Management (OKTA, AWS IAM, SSO, MFA, VPN)
  
• Cloud Management (AWS Securty Hub, AWS S3, AWS Route53, AWS Cloudwatch, Digital Ocean, GCP, Azure)
  
•  SSL/TLS (AWS ACM, OpenSSL, CSR, AWS ALB)
  
• SIEM, FIM, and IPS/IDS (AWS Cloudtrail, Trend Micro Vision One, Crowdstrike Falcon, Splunk, AWS Guard Duty)
  
• Scripting (AWS CLI, Python, Bash, Powershell)
  
• Linux and Windows Administration
  
• Agile Methodology (Scrum, JIRA, Confluence, GitLab Issue)
  
• Key Management (AWS Secrets, AWS KMS, Hashicorp Vault)
  

REQUIRED COMPETENCIES:

• Project Management: Ability to manage multiple cloud security projects simultaneously, ensuring timely and efficient delivery.
  
• Cloud Security Knowledge: Deep understanding of cloud security principles, architectures, and best practices across major cloud platforms (AWS, Azure, GCP)
  
• Security Frameworks and Compliance: Proficiency in security frameworks (NIST, ISO 27001, CIS) and compliance standards (GDPR, HIPAA, PCI-DSS)
  
• Security Tools and Technologies: Familiarity with  security tools such as SIEM, DLP, CSPM, and endpoint protection solutions
  
• Attention to Detail: Ensures accuracy and thoroughness in all technical tasks and documentation.