Cloud Security Engineer

$111,400 - $175,300/Yr

Merck KGaA Darmstadt Germany - Rahway, NJ

Full-time - Mid Level

Onsite - Rahway, NJ

Chemical Manufacturing

About the position

Our Company Cloud Security Engineering is seeking an energetic, forward-thinking professional to join our team. The individual in this role will provide subject matter expertise in cloud security engineering fundamentals supporting multi-cloud adoption and cloud DevSecOps. This position is critical in establishing a collaborative governance structure around the use of new cloud features to ensure an acceptable risk posture. The successful candidate will define the requirements and best practices while leading the collaborative development of cloud system/service architecture, design, and engineering. In this role, you will be responsible for defining strategy and governance, driving best practices for protecting company data, and evaluating new solutions to incorporate new technologies in a safe and secure manner. You will produce architecture diagrams, blueprints, and solution narratives to bring solutions to reality with a DevSecOps mindset and culture. Partnering with platform and development teams, you will assess and close gaps in cloud security posture and data protection across various security disciplines. Collaboration across IT and business organizations is essential to facilitate the design, development, engineering, and deployment of security controls used to protect our systems. Ensuring compliance with all requirements applied to cloud services and technology is also a key responsibility. Daily responsibilities include providing technical guidance and fostering a collective understanding of data protection and security issues encountered in cloud infrastructure, applications, and services. You will work closely with DevOps teams on Infrastructure as Code, Automation, and Orchestration, providing expert knowledge of cloud and data security architecture. Additionally, you will drive the collaborative development of technology strategy, standards, roadmaps, and practices, while collaborating with the data analytics team to build security reference architectures and drive preventative security controls. Prioritizing and addressing emerging risks through the application of mitigating solutions will also be part of your daily tasks.

Responsibilities

• Establish a collaborative governance structure around the use of new cloud features to establish an acceptable risk posture.
• Define the requirements, best practices, and lead the collaborative development of cloud system/service architecture, design, and engineering.
• Define strategy, governance, and drive best practices for protecting company data.
• Evaluate new solutions and develop the supporting elements required to incorporate new technologies in a safe and secure manner.
• Produce architecture diagrams, blueprints, and solution narratives to bring solutions to reality with a DevSecOps mindset & culture.
• Partner with platform and development teams to assess and close gaps in cloud security posture and data protection across the security disciplines.
• Collaborate across IT and business organizations to facilitate the design, development, engineering, and deployment of security controls used to protect.
• Ensure compliance with all requirements applied to cloud services and technology.
• Provide technical guidance and foster a collective understanding of data protection and security issues encountered in cloud infrastructure, applications, services, and for information traversing our eco-system.
• Work closely with DevOps teams on Infrastructure as Code, Automation, and Orchestration.
• Provide expert knowledge of cloud and data security architecture and consult with business and other technology teams to address complex needs.
• Drive the collaborative development of the technology strategy, technology standards, roadmaps, and practices.
• Collaborate with data analytics team to build security reference architectures and drive preventative security controls.
• Work closely with the IT and business to prioritize and address emerging risks through the application of mitigating solutions.

Requirements

• Minimum of 2 years of experience with Cybersecurity concepts, including encryption, configuration management, auditing, access control, database security and information protection.
• Minimum of 1 year of experience with Cloud Amazon Web Services (AWS) or Microsoft Azure platforms & SaaS environments.
• Experience in designing, implementing, and delivering security for cloud-native, distributed computing and architectural solutions with a Principle of 'Secure by Design.'
• Excellent knowledge of security architecture and engineering.
• Experience in large scale enterprise Cloud projects from ideation to production.
• Understanding of software/system delivery lifecycle and accompanying technologies.
• Strong interpersonal, networking, influencing, and relationship-building skills and the ability to navigate cross-culturally with a wide array of stakeholders, internally and externally.

Nice-to-haves

• Experience with protection of both structured and unstructured data via the application of controls based on data classification.
• Cloud incident response and endpoint security solutions.
• API security.
• Certification in information security, application security, and/or cloud security.
• Certification in AWS or Azure environments.
• Experience with DevSecOps, including continuous integration (CI) and continuous delivery (CD).
• Experience in Agile delivery methodologies.
• Experience in Data Leakage Prevention.
• Proficiency in mobile security concepts.

Benefits

• Bonus eligibility
• Long term incentive if applicable
• Health care and other insurance benefits (for employee and family)
• Retirement benefits
• Paid holidays
• Vacation
• Sick days