Cloud Security Engineer

Job Description

We are seeking a highly skilled and analytical

Cloud Security Engineer

In this role, you will be responsible for ensuring the robustness, integrity, and compliance of our multi-cloud ecosystems.

You will work closely with security architecture and engineering teams to design, validate, and maintain technical security controls that protect critical digital assets

Key Responsibilities

Control Validation:

Perform regular security control validation and effectiveness testing across cloud platforms and services.

Implementation & Maintenance:

Develop, implement, and maintain cloud security controls in alignment with approved security architecture designs.

Security by Design:

Support the implementation of security-by-design principles across cloud infrastructure and business applications.

Compliance & Frameworks:

Assess cloud environments against internal security policies, security baselines, and local/international regulatory requirements.

Security Tooling:

Configure and manage cloud-native security services, advanced monitoring capabilities, and security automation tools.

Weakness Identification:

Systematically review cloud configurations to identify security vulnerabilities, misconfigurations, and compliance gaps.

Cross-Team Collaboration:

Collaborate with Security Architects to translate high-level security requirements into technical controls and practical operational procedures.

Vulnerability Management:

Support comprehensive vulnerability management activities, including remediation tracking and technical validation of corrective actions.

Risk Assessments:

Participate actively in cloud security risk assessments and recommend appropriate risk mitigation measures.

Deployments Review:

Conduct security control reviews for new cloud services, infrastructure deployments, and emerging technology implementations.

Documentation:

Develop technical security standards, operational procedures, and technical architecture documentation related to cloud security.

Incident Support:

Support security incident investigations and provide technical expertise during threat containment and remediation activities.

DevSecOps Automation:

Automate routine security checks, continuous compliance monitoring, and reporting metrics wherever practical.

Threat Intelligence:

Monitor emerging cloud security threats, zero-day vulnerabilities, and industry best practices, proactively recommending security stance improvements