Senior Security Engineer — AWS Cloud
We are seeking a Senior Security Engineer — AWS Cloud to join our client-facing team, working independently and proactively to elevate cloud security standards. This fully hands-on role involves daily collaboration with senior leadership, prioritizing and resolving security issues, and continuously improving security processes and pipelines. Responsibilities Review and investigate Cloud security findings detected by CrowdStrike SOC and triage findings Work with various teams to remediate vulnerabilities and misconfigurations Address other security-related issues as they arise Update weekly and monthly security statistics for leadership Maintain and update Cloud Security processes including integrations, playbooks, custom alerts and documentation Provide evidence and documentation for yearly audits Triage Application Security vulnerabilities Triage Kubernetes Security vulnerabilities Requirements Minimum 3 years of working experience in cloud security or related roles Knowledge of AWS Cloud Security, its components and networking Expertise in AWS architecture and services such as IAM, VPC, Security Group, EC2, Lambda, ECR, ECS, S3, CloudTrail, ACM, DynamoDB, Redshift and KMS Skills in CI/CD pipelines for Security scans including creation, usage, architecture and maintenance Proficiency in Terraform and GitHub for infrastructure management Background in Kubernetes architecture, security and deployment using Terraform Competency in CrowdStrike, Security Operation Center and Snyk Familiarity with Codefresh, Argo CD and PerimeterX Understanding of SUMO Logic and Okta Capability to detect gaps in security coverage and provide solutions Investigation of security events across platforms and preparation of detailed reports Proven ability to work directly with clients and senior leadership without supervision Excellent verbal and written communication skills English proficiency at B2 level or higher for direct communication with US-based customer teams Nice to have Application security experience Familiarity with DNS Skills in Python Background in Azure and GCP Cloud security for implementing security alerting and remediation Experience with Red Team exercises