Randstad - Charlotte, NC
posted 3 months ago
We are looking for a Lead Cloud Security Engineer to join our team and help us protect our data in our cloud environment from cyber threat actors. You will be responsible for designing, implementing, and maintaining security solutions that align with our business objectives and industry best practices. You will also participate in a cross-functional team with other cloud security engineers and collaborate with other stakeholders to ensure compliance, risk management, and incident response. In this role, you will review design and implement cloud security architectures and policies for AWS environments. You will design and enforce policies for data access, retention, and deletions, and develop and enforce data protection and encryption strategies for cloud data and assets. Working closely with cross-functional teams, you will assess risk and deliver countermeasures that protect customers and company data. You will establish and document repeatable processes that ensure proper use of encryption, key management, data masking, and data labeling technologies in the cloud. Additionally, you will monitor and analyze cloud security events and data loss incidents, providing remediation guidance as necessary. Your participation in cloud security assessments and audits will be crucial, as will your ability to research and evaluate emerging cloud security trends and technologies for Data Protection, providing recommendations for adoption. As a Lead Cloud Security Engineer, you will provide technical guidance to a team of Data Protection engineers and partner with Cloud platform teams (Azure, AWS, OCI, GCP) to design and implement security controls. Ensuring compliance with data privacy regulations and standards will be a key responsibility, as will the establishment of key performance indicators for AWS data protection events. You will develop and maintain security standards and baselines to ensure controls and governance are implemented and updated dynamically at the speed of DevSecOps. Finally, you will define the Minimum Security Baseline for the use and implementation of services and applications with AWS that adhere to specific identity and Access Management practices and security governance, ensuring the reliable operation of controls and enabling continuous and real-time auditing. Participation in AWS Security Immersion Days and contribution to the AWS Security Reference Architecture will also be part of your role.