Cloud Security Engineer

Job Description We are looking for a Cloud Security Engineer who will be responsible for securing our cloud infrastructure and applications. The candidate should have a strong background in cloud security posture management, vulnerability assessments, and continuous improvement of our security stance in a multi-cloud environment. Responsibilities

• Manage Wiz.io for cloud security posture management, ensuring that our cloud environments are configured in line with security best practices.
• Conduct regular vulnerability assessments (VA) across our cloud resources (Azure, AWS, GCP, and OCI).
• Identify security misconfigurations and vulnerabilities, providing recommendations and remediation steps.
• Ensure the security of cloud-based applications, workloads, and services through continuous monitoring and vulnerability management.
• Work with the development and infrastructure teams to integrate cloud security best practices into the CI/CD pipeline.
• Stay up to date with the latest cloud security threats and vulnerabilities, implementing countermeasures where necessary.
• Collaborate with other security teams to ensure that cloud security aligns with overall enterprise security policies.

• Bachelor’s or master’s degree in computer science, or equivalent experience in related field.
• 7-12 years professional experience securing and maintaining cloud infrastructure.
• Hands-on experience with Wiz.io or similar cloud security posture management tools.
• In-depth knowledge of cloud security risks, vulnerabilities, and mitigation strategies.
• Experience in vulnerability management and conducting risk assessments in cloud environments.
• Strong understanding of AWS, Azure, GCP, and OCI security controls.
• Familiarity with cloud security frameworks (e.g., CIS, NIST, and SOC2).
• Experience with Infrastructure as Code (IaC) and DevSecOps practices.

• Cloud security certifications (e.g., AWS Certified Security Specialty, Google Professional Cloud Security Engineer, or CISSP).
• Experience with container security and orchestration tools (e.g., Kubernetes, Docker).