Senior Cloud Security Engineer

Introduction:

As a Senior Cloud Security Engineer, you will lead the design and delivery of cloud-focused security capabilities that directly reduce enterprise risk. You will collaborate closely with security and engineering partners across product suites, research and prototype solutions, and carry them through architecture, documentation, and full production implementation.

Responsibilities:

• Build and scale cloud security capabilities, 50%
• Design and deliver cloud-native security solutions
• Develop code and infrastructure as code
• Design, deploy, and manage secure cloud security services
• Integrate security capabilities into CI/CD pipelines
• Translate security priorities into production systems, 30%
• Partner across the Information Security organization
• Research, prototype, and validate new approaches
• Provide risk assessments and data-driven recommendations
• Implement durable, automated fixes for security weaknesses
• Improve and evolve security engineering patterns, 20%
• Strengthen reusable cloud security patterns
• Operate and continuously improve security tooling and services
• Contribute to forward-looking design within AWS
• Evaluate and promote new security standards, tools, and automation approaches

Requirements:

Required Skills:

• 3 to 5 years of hands-on experience in cyber defense
• Practical experience working in AWS environments
• Experience writing and tuning SIEM queries and detections
• Experience executing structured threat hunts
• Experience supporting incident response activities
• Familiarity with attacker behaviors and frameworks
• Working knowledge of scripting or automation using Python, PowerShell, or Bash
• Strong written and verbal communication skills
• A collaborative mindset

Preferred Skills:

• Experience with Sumo Logic

Nice to have:

·       Experience participating in purple team exercises or detection validation activities.

·       Relevant certifications such as Security+, GCIA, GCIH, or AWS Security Specialty.

·       Exposure to modern cloud-native architectures such as containers, serverless, or CI/CD pipelines.