Avant Digital Inc.Remote
Senior Cloud Security Engineer
United States of America
Full Time
1 day ago
No H1B
Key skills
Cloud securityAWSGCPAzureKubernetesDockerTerraformSIEMWAFVulnerability scanningPenetration testingCIS benchmarkingOWASP Web/API vulnerabilitiesOIDCOAuth2Spring SecurityHMACWS-SecurityWS-TrustApplied cryptographyEncryptionAuthenticationIdentity and access managementSecurity standards and regulationsISO 27001SOC 2PCI DSSHIPAAGDPRPythonBashPowerShellAWS Certified Security SpecialistAzure Security EngineerCCSKCCSPSpringLeadershipCommunicationCritical ThinkingProblem SolvingCollaborationOWASPPenetration TestingCloud Security
About this role
Avant Digital Inc. is looking for a certified cybersecurity professional to join their Cyber Fusion team. The Senior Cloud Security Engineer will be responsible for ensuring the security and compliance of cloud infrastructure and data, collaborating with various teams to implement security measures and maintain compliance with industry standards.
Responsibilities:
- Develop and maintain security policies, standards, and procedures for cloud environments
- Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps
- Implement and monitor security controls and tools for cloud platforms and services
- Support the security of AWS, GCP, Kubernetes/Docker, and Terraform-based infrastructure
- Mentor engineering and operations staff on unique cloud-based security controls
- Conduct security assessments and audits of cloud infrastructure and data
- Identify and remediate security vulnerabilities and incidents
- Support compliance initiatives and certifications for cloud environments
- Provide security guidance and best practices to engineering, DevOps, and IT teams
- Stay updated on emerging security threats and trends for cloud environments
Requirements:
- Bachelor's degree in computer science, Information Security, or a related field
- 10+ years of experience in security engineering, cloud security, or compliance
- Strong knowledge of cloud security concepts, principles, and practices
- Familiarity with cloud security best practices and frameworks (e.g., CISv8, NIST, ISO, CSA)
- Experience creating and maintaining security documentation, such as policies, standards, procedures, and guidelines
- Experience with tool sets relevant to modern cloud operations like SIEM, WAF, vulnerability scans, pen tests, CIS benchmarking, etc
- Working knowledge of OWASP Web/API vulnerabilities (CSRF, XSS, SQLI, etc.) and compensating controls
- Knowledge of Web/API security architecture common authentication and authorization technologies (OIDC, OAuth2, Spring Security, HMAC, WS-Security, WS-Trust)
- Solid understanding of applied cryptography fundamentals (Encryption, Authentication, Symmetric Cryptography, Asymmetric Cryptography, etc.)
- Ability to translate complex technical concepts into clear and concise language for diverse audiences and Attention to detail with quality assurance
- Hands-on experience with security tools, frameworks for cloud platforms (e.g., AWS, Azure, GCP), and technologies (e.g., firewalls, encryption, identity and access management, vulnerability scanning, penetration testing)
- Experience with security standards and regulations for cloud environments (e.g., ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR)
- Experience with scripting languages (e.g., Python, Bash, PowerShell)
- Excellent communication, collaboration, and problem-solving skills
- Certifications in cloud security or compliance (e.g., AWS Certified Security Specialist, Azure Security Engineer, CCSK, CCSP) are mandatory
- Effective verbal and non-verbal communication skills at all levels of the organization
- Leadership teamwork and collaboration
- Discretion
- Problem solving
- Critical Thinking
- Self-initiated/sufficient
- Motivated