Cloud Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, develop, and enhance cloud security architectures.

• Construct, monitor, and respond to security alerts from SIEM and various security systems.

• Deliver operational security support Monday through Friday, from 8am to 5pm EDT, including evening and weekend on-call shifts as necessary.

• Address customer inquiries through questionnaires and phone calls.

• Generate network diagrams, architecture diagrams, data flow diagrams, and other artifacts requested by customers.

• Review and address security alerts as a Level-2 Security Operations support team member.

• Enhance alerting and reporting capabilities to boost attack-surface visibility.

• Offer expertise on SaaS security, IAM, data encryption, API security, and secure configuration standards.

• Conduct firewall assessments, access reviews, system evaluations, and risk assessments.

• Lead and participate in compliance projects, security evaluations, and gap analyses.

• Counsel clients and convey technical security concepts to both technical and non-technical audiences.

• Present findings, engage in client workshops, and foster client relationships.

• Assist in cloud security incident response and remediation efforts.

• Spearhead Incident Response Plan initiatives and develop related documentation.

• Investigate emerging cloud security threats, technologies, and best practices.

⛳️ Requirements

• 7-10 years of progressive experience in cloud security engineering.

• Strong organizational, administrative, project management, and communication skills.

• Extensive hands-on experience with Azure or Google Cloud Platform (GCP) security services and best practices.

• Experience in managing cloud security alerts within a SIEM.

• Proven ability to configure Entra ID and Azure Cloud features effectively.

• Demonstrated expertise in securing SaaS applications and a solid understanding of typical SaaS security challenges.

• Advanced scripting capabilities, along with knowledge of network security principles and implementation in cloud environments.

• Strong grasp of cloud identity and access management (IAM) principles and best practices across multi-cloud environments.

• Comprehensive knowledge of compliance frameworks and regulations, including GDPR, SOC 2, ISO 27001, and CMMC.

• Exceptional communication, presentation, and interpersonal skills.

• Ability to work autonomously, manage multiple tasks, and thrive in a fast-paced, client-facing setting.

• Problem-solving orientation with meticulous attention to detail.

• Bachelor's Degree in Computer Science, Risk Management, Cyber Security, or a related field.

• Over 4 years of experience in securing, configuring, and supporting cloud environments (Azure and GCP).

• More than 4 years of experience in a security operations center, managing security alerts, configuring SIEMs, and creating custom alerts using PowerShell, Python, or Bash scripts.

• CISSP certification is mandatory.

🏝️ Benefits

• Medical, dental, and vision insurance.

• Disability coverage.

• Employer-paid life insurance.

• Mental health support resources.

• 401(k) retirement plan.

• Fully paid parental leave program.

• Generous paid time off (PTO).

• Flexible work schedules.

• Opportunities for remote work.

• Paid company holidays.

• Appspace Quiet Fridays (no non-essential internal meetings scheduled).

• Casual dress work environment.