Cloud Security Engineer

$66,380 - $170,038/Yr

Stride K12 - Richmond, VA

Full-time - Mid Level

Richmond, VA

Educational Services

About the position

The Cloud Security Engineer is responsible for architecting, deploying, and operating secure cloud application infrastructures that align with business needs. This advanced role focuses on enhancing the company's security posture within cloud computing environments, delivering applications at scale, and ensuring resiliency to support business initiatives. The engineer will also provide security direction, maintain oversight of cloud security incidents, and stay current with regulatory and industry best practices.

Responsibilities

• Develop and maintain secure, resilient enterprise-grade cloud infrastructure in partnership with architects and system engineers.
• Secure cloud-based applications across public, private, and hybrid environments in accordance with corporate policies.
• Implement Identity and Access Management (IAM) controls across cloud environments to enhance security.
• Ensure the use of secure configuration management tools (e.g., Jenkins, Chef, Ansible).
• Assist with development and utilization of scripts (e.g., Python, Java) to enhance cloud security through automation.
• Monitor and assess new threats to recommend strategic initiatives for mitigating risks in cloud infrastructure.
• Conduct remediation efforts based on findings from security assessments and audits.
• Actively participate in security project meetings, guiding secure design and implementation of cloud solutions.
• Maintain oversight and assess risks presented by external vendors or service providers in cloud environments.
• Act as a key figure in the incident response process for cloud security incidents.
• Stay current with regulatory, privacy, and industry best practices impacting cloud security.

Requirements

• Bachelor's degree in computer science, information assurance, MIS or related field.
• Five (5) years' experience in cybersecurity as a practitioner with at least 2-3+ years exposure with Amazon Web Services (AWS).
• One or more certifications including CISSP, AWS Certified Solutions Architect - Professional, AWS Certified Security - Specialty, and Security+.
• Strong Linux and Windows support skills.
• Experienced in cloud networking architecture and cloud operations.
• Familiarity with tools such as Git, Jenkins, CloudFormation.
• Network and encryption experience, including VPNs, IPsec, SSL/TLS, LDAP, and PKI.
• Experience with scripting languages such as Python, Ruby, PowerShell, and JavaScript.
• Familiarity with key security concepts/frameworks such as OWASP, CVE, and CVSS.
• Proficient in automation and deploying CI and CD tools and services (Jenkins Pipeline as Code, Git, Maven).
• Experience integrating with native AWS services.

Nice-to-haves

• Experience with threat intelligence services in a production environment.
• Understanding of various regulatory requirements and laws, including PCI, SOX, HIPAA, GDPR, and GLBA.
• Experience with ISO 27001/2, ITIL, or NIST.
• Up-to-date understanding of incident response, system configuration, vulnerability management, and hardening guidelines.

Benefits

• Health benefits
• Retirement contributions
• Paid time off
• Eligible for bonuses