Cloud Security Engineer

$149,200 - $234,850/Yr

eBay - New York, NY

Full-time - Mid Level

Remote - New York, NY

Professional, Scientific, and Technical Services

About the position

At eBay, we are more than just a global ecommerce leader; we are transforming the way the world shops and sells. Our platform empowers millions of buyers and sellers across more than 190 markets globally. We are committed to pushing boundaries and making a significant impact as we reinvent the future of ecommerce for enthusiasts. Our customers guide us, authenticity is paramount, bold ideas are encouraged, and everyone is welcome to bring their unique selves to work every day. Together, we are dedicated to sustaining the future of our customers, our company, and our planet. We are looking for a highly skilled and experienced Cloud Security Engineer to join our team. In this role, you will be responsible for analyzing the technical needs of our merchants and acquisitions, identifying the right cloud-based solutions that align with business objectives while ensuring compliance with our organizational security policies and regulatory requirements. You will play a crucial role in protecting our cloud environments, managing security programs, and ensuring the secure integration of new business entities. Your responsibilities will include evaluating the technical requirements of merchants and acquisitions to determine appropriate cloud security solutions, designing and implementing cloud security architectures, conducting risk assessments, collaborating with multi-functional teams, implementing security controls, staying updated on emerging threats, leading incident response activities, and developing training materials to educate staff on cloud security standards and initiatives.

Responsibilities

• Evaluate the technical requirements of merchants and acquisitions to determine appropriate cloud security solutions that meet business needs.
• Design, implement, and manage cloud security architectures that align with internal security policies and external regulations.
• Conduct risk assessments and security reviews of cloud environments, including infrastructure, applications, and services.
• Collaborate with multi-functional teams to ensure that cloud security considerations are coordinated throughout the development lifecycle.
• Implement and manage security controls such as firewalls, intrusion detection systems, encryption, and access controls in cloud environments.
• Stay abreast of emerging cloud security threats and technologies to continuously improve our security posture.
• Lead incident response activities for cloud-based systems, including forensic analysis and mitigation strategies.
• Conduct vulnerability assessments and penetration testing of cloud environments, and coordinate the remediation of identified vulnerabilities.
• Develop and deliver training materials to educate staff on cloud security standard processes, awareness, and security program initiatives.

Requirements

• 8+ years proven relevant experience in information security, with a focus on cloud security engineering, architecture, and security program management.
• Strong understanding of cloud computing technologies and services from providers such as AWS, Azure, or Google Cloud Platform.
• Proficiency in application security, cryptography, secure storage solutions, vulnerability management, and system hardening.
• Experience with security frameworks and standards such as ISO 27001, NIST, and CIS benchmarks.
• Familiarity with compliance and regulatory requirements relevant to cloud security.
• Excellent analytical, problem-solving, and project management skills, with the ability to think strategically about security risks, solutions, and program execution.
• Relevant certifications such as CISSP, CCSP, CISM, PMP, or equivalent.

Nice-to-haves

• Experience with security program management activities, including the development of security roadmaps and project prioritization.
• Knowledge of GDPR, HIPAA, PCI-DSS compliance requirements.

Benefits

• 401(k) eligibility
• Various paid time off benefits, including PTO and parental leave
• Target bonus and restricted stock units (as applicable)