Cloud Security Engineer

Job Overview

Our client in the Bedminster area of NJ has an excellent HYBRID opportunity for a Cloud Security Engineer!

 

Responsibilities:

  • Support the overall vision and strategy of the Information Security department.
  • Research, evaluate, design, test, recommend and operationalize security solutions in the hybrid-cloud security architecture and analyze its impact on the existing environment.
  • Provide technical expertise for the implementation, configuration, and monitoring of cloud-native and third-party security controls such as Cloud Security Posture Management (CSPM) and unified Cloud Workload Protection Platform (CWPP).
  • Collaborate with team members to implement and maintain Data and Endpoint Protection solutions, including Cloud Access Security Broker (CASB) and Data Loss Prevention (DLP).
  • Design and implement security solutions for containers (Docker/Kubernetes) as part of the DevOps process.
  • Support the adoption, administration, and maintenance of IAM solutions, including PAM, SSO, and MFA.
  • Monitor and report on emerging risk and compliance with organizational security policies.
  • Provide technical guidance, training and documentation covering the usage and impact of hybrid-cloud security technology.
  • Prepare technical reports for senior management.
  • Participate in IT problem and change management forums.
  • Stay current on Cloud and Cyber Security technology trends.

 

Requirements:

  • Minimum of 3 years’ experience in Cloud security, Cybersecurity, and/or other IT-related fields (Networking, System Administration).
  • Bachelor’s degree in a technology field preferred.
  • Cloud and Cybersecurity certifications in one or more areas is strongly preferred: CISSP, SANS GIAC, BTL1, Security+, Azure-Based certifications, or similar.
  • Experience with Azure and Microsoft O365.
  • Scripting (PowerShell and/or Python) and Automation (Azure CLI, ARM Templates) a plus.
  • Knowledge of security frameworks including NIST Cybersecurity Framework, NIST 800-53, ISO 27001/27002, MITRE ATT&CK, OWASP Top 10, CWE/SANS Top 25, and CIS CSC.
  • Experience developing and maintaining policies, procedures, standards, and guidelines.
  • Experience working in a regulated environment preferred.
  • Comprehensive understanding of cloud and cybersecurity methodologies and best practices.
  • Knowledgeable in cloud architecture concepts related to VNETs, DNS, SSO, MFA, VMs, WAF and DDoS mitigation.
  • Comfortable working with a variety of technologies supporting large scale deployments, troubleshooting solution issues, and proficient in monitoring and investigating security events.
  • Strong experience in securing Windows / Azure environments.
  • Knowledge of Incident Management and Response Planning requirements and procedures. Familiarity with third-party audits and Cloud risk assessment methodologies.
Job Detail
Shortlist Never pay anyone for job application test or interview.