Cloud Security Engineer (Multi-Cloud)

Cloud Security Engineer (Multi-Cloud)

Charlotte, NC, Hybrid

12+ Months Contract

Skills:

• Implement cloud security strategy, standards, procedures, best practices, and DevSecOps.
• Implement processes and technical controls supporting cloud security standards including integration of cloud services and workloads into corporate cybersecurity services.
• Collaborate with operations and engineering teams to implement and tune cloud-native security monitoring, tooling and reporting
• Implement CSPM tools such as wiz.io across multiple cloud platforms
• Define cloud security policies, standards, and best practices in a multi-cloud environment
• Promote awareness of corporate cybersecurity policy, standards and guidelines
• Design cloud-based network traffic flows to drive anomaly detection capability
• Mentor engineering and operations staff on unique cloud-based security controls
• Develop tools to improve cloud specific anomaly detection requirements
• Foster a culture of security by partnering with solutions architects & other business teams to balance key performance and security
• Perform regular reviews of cloud infrastructure for security, and cloud best practices.
• Develop threat models to identify risks and prioritize improvements to our architecture.
• Drive the adoption of Authentication and Authorization reference architectures for managing cloud infrastructure.
• Educate peers on applying the latest cloud native technologies when developing new services, systems and applications.
• Contribute to a secure/compliant cloud-native service catalog, repositories
• Maintain Compliance across our Production, Development and Corporate systems hosted in the public clouds
• Collaborate with engineering and operations teams toward implementing controls and processes that address identified gaps

Preferred qualifications & experience:

• Compliance Automation
• Strong experience in vulnerability management & risk assessment
• Strong experience in implementing CIS, NIST & other benchmarks
• Encryption theory & key management (PKI)
• Multi-Cloud security experience working in the Financial industry
• Proficient in analyzing architecture patterns, diagrams, Network & application architecture
• Ability to identify threat surfaces & identify pro-active & reactive security controls to minimize the overall residual risk.
• Cloud certifications in Azure, AWS & Google Cloud Platform is preferred.