Cloud Security Engineer

AIG - Charlotte, NC

Full-time - Mid Level

Charlotte, NC

Insurance Carriers and Related Activities

About the position

The Cloud Security Engineer at AIG plays a critical role in safeguarding multi-cloud workloads and services. This position involves working with the Prisma Cloud security suite to ensure the security of cloud-based applications and infrastructure. The engineer will be responsible for developing security policies, integrating security measures into CI/CD pipelines, and collaborating with various teams to implement security solutions effectively.

Responsibilities

• Develop and implement security policies, standards, and procedures for cloud-based applications and infrastructure leveraging Prisma Cloud's security solutions.
• Integrate robust code security measures and scanning capabilities into CI/CD pipelines and other cloud workflows using Infrastructure as Code.
• Implement and manage enterprise security policies using Prisma CSPM's advanced capabilities, including preventive guardrails and automated remediations.
• Collaborate with the security architecture team, cloud security engineering, and security remediation teams to implement approved blueprints policies in Prisma.
• Leverage IaC and CI/CD to deploy, patch, and upgrade Prisma Defenders in Kubernetes and serverless architectures.
• Configure vulnerability items, misconfigurations, and alerts using ServiceNow/Prisma Cloud integration, assisting stakeholders with remediation efforts.
• Assist the SOC and Cyber Defense & Response Team during security incidents, making timely configuration changes to Prisma and participating in incident resolution.
• Manage user access in Prisma portal based on least privilege roles, providing operations training and support as needed.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, or related field.
• 6+ years of experience supporting and implementing multi-cloud security solutions.
• 3+ years of hands-on experience with Prisma Cloud compute agents, DevOps code scanning deployment, and posture management policy tuning.
• Experience with DevSecOps and shift-left principles for monitoring and remediating security risks.
• Certification in Prisma Certified Cloud Security Engineer (PCCSE) or Palo Alto Networks Systems Engineer - Prisma Cloud Associate.
• Additional certifications such as CISSP, CCSP, Security+, or foundational tracks for Azure, AWS, GCP are desired.
• Proficiency with RQL to create advanced Prisma queries.
• Strong analytical and problem-solving skills.
• Excellent communication skills and ability to collaborate with cross-functional teams.
• Proactive and self-motivated with the ability to manage multiple tasks.

Nice-to-haves

• Additional certifications such as CISSP, CCSP, Security+, foundational/associate/security tracks for Azure, AWS, GCP.

Benefits

• Comprehensive benefits package focused on health, wellbeing, and financial security.
• Professional development opportunities.
• Flexible work arrangements.
• Diversity and inclusion learning programs.
• Cultural awareness activities and Employee Resource Groups (ERGs).