Cloud Secuirty Engineer

Hibbett Sports - Birmingham, AL

Full-time

Birmingham, AL

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Cloud Security Engineer is responsible for ensuring the security of cloud-based infrastructure and applications, safeguarding sensitive data, and mitigating potential security threats. This role involves collaborating with cross-functional teams to design, implement, and maintain robust security measures that align with industry best practices and compliance standards.

Responsibilities

• Develop and implement comprehensive cloud security strategies to protect infrastructure, data, and applications hosted on cloud platforms.
• Design secure cloud architectures, considering network security, identity and access management (IAM), data encryption, and secure deployment practices.
• Conduct regular risk assessments and vulnerability scans to identify security gaps and ensure compliance with relevant regulations and industry standards.
• Develop and maintain incident response plans, and lead investigations into security incidents and breaches.
• Implement and manage robust IAM solutions to control access to cloud resources, including user authentication, authorization, and privilege management.
• Implement security automation and orchestration tools to streamline security operations and enhance response times to security events.
• Configure and manage security monitoring tools to continuously monitor cloud environments for suspicious activities and security events.
• Provide security training and awareness programs to educate employees on best security practices.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or related field or equivalent experience.
• Proven experience (2-4 years) working in cloud security roles, with hands-on experience in securing cloud environments (Azure, OCI).
• In-depth knowledge of cloud security principles, best practices, and industry standards.
• Strong understanding of networking concepts, including TCP/IP, DNS, VPN, and firewalls.
• Experience with security tools such as SIEM, API scanners, WAF, and vulnerability management scanners.
• Relevant certifications such as Security + or Certified Cloud Security Professional (CCSP) are preferred.
• Excellent communication and collaboration skills.

Nice-to-haves

• Experience with cloud security compliance frameworks such as PCI-DSS, SOC 2, and HIPAA.
• Familiarity with security automation tools and practices.