Cloud Security Engineer

$150,000 - $200,000/Yr

Assured Guaranty - New York, NY

Full-time

New York, NY

About the position

The Cloud Security Engineer plays a critical role in safeguarding the confidentiality, integrity, and availability of information assets within the organization. This position is part of the information security team, which is tasked with defining and implementing security policies and standards while continuously monitoring for emerging threats. As a hands-on technical role, the Cloud Security Engineer is responsible for securing cloud-based systems and applications, ensuring that they are protected against vulnerabilities and risks associated with cloud environments. In this role, the Cloud Security Engineer will design, implement, and maintain cloud security policies and procedures that align with industry best practices. They will evaluate various security products and vendors, providing recommendations based on their findings. The engineer will also implement, configure, and manage cloud security tools and services, ensuring that they are effectively integrated into the organization's cloud infrastructure. A key responsibility of the Cloud Security Engineer is to identify and remediate cloud security risks and vulnerabilities. This involves collaborating with other cloud engineers and developers to ensure compliance with established cloud security standards. The engineer will perform security assessments of applications to identify potential weaknesses and will research and evaluate new cloud security technologies and trends to stay ahead of potential threats. Additionally, they will monitor and respond to cloud security events and incidents, ensuring that any breaches or vulnerabilities are addressed promptly and effectively.

Responsibilities

• Design, implement, and maintain cloud security policies and procedures.
• Evaluate security products and vendors and provide recommendations.
• Implement, configure, and manage cloud security tools and services.
• Identify and remediate cloud security risks and vulnerabilities.
• Collaborate with other cloud engineers and developers to ensure compliance with cloud security standards and best practices.
• Perform security assessments of applications.
• Research and evaluate new cloud security technologies and trends.
• Monitor and respond to cloud security events and incidents.

Requirements

• 5-7 years' experience in a security engineering role, preferably in the insurance or financial services industries.
• Working experience with cloud native security services, static analysis, CI/CD pipelines, cloud security posture management (CSPM), cloud-native application protection platform (CNAPP), vulnerability management, infrastructure-as-code (IaC), privileged access/secrets management, and security information and event management (SIEM).
• Experience with AWS preferred.
• Bachelor's degree or higher in Information Security, Information Systems, Computer Science, or equivalent.
• Ability to communicate effectively and professionally, both verbally and written.
• Security certifications a plus, such as CCSP, CSSLP, CISSP, ISSAP, ISSEP, GIAC.

Benefits

• Annual discretionary bonus
• Employee benefits