Senior Cloud Security Engineer

Reltio, an SAP Company, provides a cloud-native Context Intelligence Platform that connects and governs enterprise data for AI and business applications. The Senior Cloud Security Engineer will lead information security functions by assessing, designing, engineering, and implementing security and operational controls across Reltio’s multi-cloud environment. The role partners with technology and business teams to support security strategy, compliance, and protection of intellectual property and customer data.

Responsibilities:

• Serve as a cloud security subject matter expert by providing guidance on industry best practices and defense in-depth strategies
• Proven experience with deploying security controls in a multi-cloud environment (AWS, GCP, Azure)
• Create security and operational controls to enforce various aspects of Reltio’s security policies
• Work with the respective functional teams and stakeholders to resolve security related configuration issues
• Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs
• Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders
• Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies

Requirements:

• • 5+ years of experience implementing security solutions
• • Strong cybersecurity background and knowledge
• • Understanding of cyber threat vectors and countermeasures
• • Understanding of Linux/Unix and Windows platforms
• • Understanding of Cloud Infrastructure and Cloud Security
• • Understanding of networking (WAN, LAN, wLAN), network domains (Internet, intranet, DMZ), communication techniques/protocols (IP and others), and their combined effects on network and host systems security
• • Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc
• • Strong experience with scripting and infrastructure-as-code (IaC)
• • Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO
• • Solid understanding of audit methodologies and processes
• • Experience working with virtual teams in a global environment
• • Strong communication and presentation skills
• • Adaptable and agile
• • Good interpersonal, partnership, and leadership skills (without direct authority of others)
• • Experience developing and operationalizing a vulnerability management program
• • Experience working with container-based architectures
• • Security and Cloud certifications