Cloud Security Engineer

Job Summary

We are seeking a Cloud Security Engineer to design, implement, and maintain secure cloud environments. The role combines cloud infrastructure and cybersecurity expertise to ensure secure, reliable, and compliant solutions while working closely with business and technical teams.

Key Responsibilities

• Design and implement secure cloud infrastructure following security best practices.
• Review solution designs and recommend appropriate security controls.
• Develop and maintain cloud security standards, hardening guidelines, and documentation.
• Implement secure networking, identity and access management, encryption, and connectivity controls.
• Support solution architects and business teams by providing security guidance throughout the solution lifecycle.
• Integrate security into infrastructure deployment, monitoring, automation, and operational processes.
• Enhance security monitoring, incident response, and threat detection capabilities.
• Perform vulnerability assessments, risk analysis, and coordinate remediation activities.
• Support security incidents, compliance activities, and customer security assessments.
• Research emerging threats and recommend continuous security improvements.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in cybersecurity and cloud security.
• Strong understanding of cloud infrastructure, networking, identity and access management, and infrastructure security.
• Experience with vulnerability management, security hardening, and security monitoring.
• Knowledge of Linux administration, networking, encryption, and security best practices.
• Experience with automation or Infrastructure as Code is a plus.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Skills

• Cloud security architecture
• Security operations and incident response
• Risk assessment and threat modeling
• DevSecOps practices
• Compliance frameworks (ISO 27001, NIST, CIS, PCI DSS)
• Scripting and automation