Cloud Security Engineer

$111,400 - $175,300/Yr

Merck KGaA Darmstadt Germany - Remote, OR

Full-time - Entry Level

Onsite - Remote, OR

Chemical Manufacturing

About the position

The Cloud Security Engineering team is looking for a proactive professional to provide expertise in cloud security fundamentals, supporting multi-cloud adoption and DevSecOps practices. This role involves establishing governance structures, defining security requirements, and collaborating with various teams to ensure a secure cloud environment while maintaining compliance with regulations.

Responsibilities

• Establish a collaborative governance structure around the use of new cloud features to establish an acceptable risk posture.
• Define the requirements, best practices, and lead the collaborative development of cloud system/service architecture, design, and engineering.
• Define strategy, governance, and drive best practices for protecting company data.
• Evaluate new solutions and develop supporting elements required to incorporate new technologies securely.
• Produce architecture diagrams, blueprints, and solution narratives to implement solutions with a DevSecOps mindset.
• Partner with platform and development teams to assess and close gaps in cloud security posture and data protection.
• Collaborate across IT and business organizations to facilitate the design, development, engineering, and deployment of security controls.
• Ensure compliance with all requirements applied to cloud services and technology.
• Provide technical guidance on data protection and security issues in cloud infrastructure, applications, and services.
• Work closely with DevOps teams on Infrastructure as Code, Automation, and Orchestration.
• Drive the collaborative development of technology strategy, standards, roadmaps, and practices.
• Collaborate with data analytics teams to build security reference architectures and drive preventative security controls.
• Prioritize and address emerging risks through the application of mitigating solutions.

Requirements

• Minimum of 2 years of experience with Cybersecurity concepts, including encryption, configuration management, auditing, access control, database security, and information protection.
• Minimum of 1 year of experience with Cloud Amazon Web Services (AWS) or Microsoft Azure platforms & SaaS environments.
• Experience in designing, implementing, and delivering security for cloud-native, distributed computing and architectural solutions with a Principle of 'Secure by Design.'
• Excellent knowledge of security architecture and engineering.
• Experience in large scale enterprise Cloud projects from ideation to production.
• Understanding of software/system delivery lifecycle and accompanying technologies.
• Strong interpersonal, networking, influencing, and relationship-building skills.

Nice-to-haves

• Experience with protection of both structured and unstructured data via the application of controls based on data classification.
• Cloud incident response and endpoint security solutions.
• API security.
• Certification in information security, application security, and/or cloud security.
• Certification in AWS or Azure environments.
• Experience with DevSecOps, including continuous integration (CI) and continuous delivery (CD).
• Experience in Agile delivery methodologies.
• Experience in Data Leakage Prevention.
• Proficiency in mobile security concepts.

Benefits

• Bonus eligibility
• Long term incentive if applicable
• Health care and other insurance benefits (for employee and family)
• Retirement benefits
• Paid holidays
• Vacation
• Sick days