Advanced Cloud Security Engineer responsible for designing, implementing, and monitoring security guardrails across AWS, Azure, GCP, and OCI, embedding security into CI/CD pipelines, and managing third‑party SSE platforms.
Compensation Range: $116,255.00 - $177,503.00
- Design, build, and maintain enterprise‑grade security controls using AWS and third‑party SSE.
- Provide primary AWS and secondary Azure, GCP, OCI security engineering, posture management, and threat detection support.
- Operationalize Infrastructure as Code (IaC) and Policy as Code (PaC) to automate security guardrails, vulnerability scanning, and compliance checks.
- Architect and maintain policies within the third‑party SSE platform to protect corporate data across cloud environments.
- Partner with SOC to investigate cloud‑specific security incidents, develop automated remediation playbooks, and conduct threat‑modeling exercises.
- Bachelor's degree in computer science, engineering, or related technical field
- Nice to have: AWS Certified Security – Specialty
- Nice to have: AWS Certified Solutions Architect – Professional
- Nice to have: CCSP, CISSP, CISM, GIAC certifications (e.g., GCIH, GCIP, GSEC, GREM)
- Nice to have: Vendor‑specific cloud certifications
AWS security services (IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, Macie, Network Firewall)Azure security (Entra ID, Microsoft Defender for Cloud)GCP security (Security Command Center, IAM)OCI security (Identity and Access Management, Cloud Guard)Infrastructure as Code (Terraform, AWS CloudFormation)Policy as Code (Open Policy Agent/Rego, AWS CloudFormation Guard, HashiCorp Sentinel)Cloud networking (VPC/VNet peering, CASB, SWG, ZTNA)SASE/SSE platform configuration (CASB, SWG, DLP)TerraformAWS CloudFormationOpen Policy AgentAWS CloudFormation GuardHashiCorp Sentinel - Comprehensive benefits package