Senior Information Security Engineer

Job Summary

Cloud Security - Senior Information Security Engineer

The Senior Security Engineer - Cloud Security is responsible for implementing, operating, and continuously improving the organization's Cloud-Native Application Protection Platform (CNAPP) and associated cloud security capabilities.

The role will work closely with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to identify cloud security risks, improve security posture, and drive vulnerabilities and misconfigurations through remediation.

The ideal candidate combines strong cloud security knowledge, CNAPP platform expertise, automation skills, and hands-on experience securing enterprise cloud environments.

Responsibilities

• Implement, configure, and administer the organizations enterprise CNAPP platform across cloud environments.
• Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform.
• Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools.
• Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations.
• Monitor platform health, coverage, data ingestion, scanning status, and integration failures.
• Evaluate and implement new CNAPP capabilities as the organizations cloud environment and security requirements evolve.
• Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services.
• Work with cloud engineering teams to establish secure cloud configuration baselines.
• Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services.
• Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context rather than severity alone.
• Work with infrastructure and application teams to drive remediation
• Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and combinations of risks that create exploitable attack paths.

Qualifications

• Bachelors degree in Computer Science, Information Security, Engineering, or equivalent professional experience.
• 7+ years of Information Security experience, with significant hands-on experience in cloud security.
• Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP.
• Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies.
• Strong understanding of:
  • Cloud security architecture
  • Cloud IAM and least privilege
  • Cloud networking and exposure
  • Vulnerability management
  • Containers and Kubernetes security
  • Infrastructure-as-Code security
  • Cloud logging and monitoring
  • Security configuration management
• Experience analyzing and remediating cloud security findings.
• Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages.
• Familiarity with CI/CD pipelines and DevSecOps practices.
• Ability to troubleshoot complex security integrations and cloud configurations.
• Strong analytical, problem-solving, documentation, and communication skills.
• Familiarity with MITRE ATTCK, particularly cloud-related attack techniques.
• Relevant certifications such as:
  • CCSP
  • CCSK
  • AWS Security Specialty
  • Microsoft Azure Security Engineer
  • Google Professional Cloud Security Engineer
  • CISSP or equivalent

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.