Cloud Security Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Cloud Security Operations: Design, implement, and optimize comprehensive cloud security architectures to enhance, build, monitor, and address all security alerts from our SIEM and other security systems. This role operates Monday to Friday from 8 am to 5 pm EDT, with on-call shifts available during evenings and weekends when necessary.

• Network Security Expertise: Your proficiency in network and cloud security will be essential for responding to customer questionnaires, handling customer calls, and creating necessary artifacts such as network diagrams, architecture diagrams, data flow diagrams, and other documents to fulfill customer requests. Strong written communication skills and meticulous attention to detail are required in this area.

• SIEM Integration & Optimization: As a Level-2 member of the Security Operations support team, you will review and address all security alerts promptly. Collaborating with our existing Security Operations team, you will enhance our alerting and reporting capabilities to improve visibility across our attack surface. Proficiency in Powershell or similar scripting is a must.

• SaaS Security Best Practices: Provide expert advice on securing SaaS applications, focusing on identity and access management (IAM), data encryption, API security, and establishing secure configuration baselines. You will be responsible for leading and managing all firewall reviews, access reviews, system reviews, and risk assessments.

• Compliance & Governance: Lead and contribute to compliance initiatives, ensuring that cloud environments comply with industry standards and frameworks such as GDPR, SOC 2, ISO 27001, CMMC, and CSA STAR. Conduct security assessments and gap analyses.

• Customer Engagement & Presentation: Serve as a trusted advisor to clients, clearly communicating complex technical security concepts to both technical and non-technical stakeholders. Deliver engaging presentations, participate in client workshops, and cultivate strong client relationships.

• Incident Response & Remediation: Assist in incident response activities by offering expert analysis and remediation strategies for cloud security incidents. This includes leading Incident Response Plan initiatives and creating documentation to guide all parties in following specific plans.

• Stay Ahead of the Curve: Regularly research and assess emerging cloud security threats, technologies, and best practices.

⛳️ Requirements

• 7-10 years of progressive experience in cloud security engineering.

• Strong organizational, administrative, project management, and communication skills are necessary to oversee the overall security program.

• In-depth hands-on experience with Azure or Google Cloud Platform (GCP) security services and best practices is crucial, as well as managing cloud security alerts within our SIEM.

• Demonstrable experience in configuring Entra ID and Azure Cloud features.

• Proven expertise in securing SaaS applications and a solid understanding of common SaaS security challenges.

• Extensive experience in scripting, network security principles, and implementation within cloud environments.

• Strong grasp of cloud identity and access management (IAM) principles and best practices across multi-cloud environments.

• Solid knowledge of compliance frameworks and regulations (e.g., GDPR, SOC 2, ISO 27001, CMMC).

• Excellent communication, presentation, and interpersonal abilities, with the capability to convey complex security concepts clearly and concisely to varied audiences.

• Capacity to work independently, manage multiple tasks, and thrive in a fast-paced, client-facing environment.

• Problem-solving mindset with a keen attention to detail.

• Bachelor's Degree in Computer Science, Risk Management, Cyber Security, or a related field.

• 7-10 years of progressive cloud security experience.

• 4+ years of experience in securing, configuring, and supporting cloud environments (Azure and GCP).

• 4+ years of experience supporting a security operations center, managing security alerts, configuring SIEMs, and creating custom alerts using PowerShell, Python, or Bash scripts.

• Security Certifications: CISSP is required.

🏝️ Benefits

• Generous PTO.

• Flexible work schedules.

• Remote work opportunities.

• Paid company holidays.

• Appspace Quiet Fridays (No non-essential internal meetings scheduled).

• A casual dress work environment.