Lead Cloud Security Engineer

Raymond James - Denver, CO

Full-time - Mid Level

Denver, CO

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Lead Cloud Security Engineer at Raymond James Financial, Inc. is responsible for the analysis, design, development, implementation, and maintenance of cloud security controls in a multi-cloud environment (AWS and Azure). This role requires collaboration with operational teams to maintain the organization's cloud security posture while ensuring flexibility and teamwork through a hybrid work schedule.

Responsibilities

• Evaluate events and alerts within the cloud native protection platform and tune alerts based on environment and compensating controls.
• Manage the lifecycle for all security threats, vulnerabilities, and remediations associated with cloud workloads.
• Partner with security teams to design, test, implement, and maintain security controls that align with security policies.
• Work effectively across security, engineering, and architecture functions to enhance cloud security strategies.
• Design and maintain baseline security controls and hardening requirements within AWS and Azure.
• Develop and maintain alerting mechanisms using cloud native tools, Splunk, and cloud security posture management platforms.
• Recommend and assist in implementing security guardrails to protect workloads within the cloud while maintaining deployment agility.
• Problem solve different cloud providers using various scripting languages.
• Develop infrastructure as code using Terraform.
• Proactively explore emerging technologies and their potential impact on security teams.
• Proactively explore emerging cloud security threats, recommend solutions, and assist in implementation of those solutions.
• Contribute to a culture of innovation, collaboration, and continuous improvement.
• Communicate blockers and delays before they require escalation.

Requirements

• Minimum of a Bachelor's degree in Computer Science, MIS or related degree and five (5) years of relevant experience or combination of education, experience and training.
• Minimum 4 years of AWS experience.
• Experience writing in multiple coding languages (e.g., Python, Go, Bash, etc.).
• Experience with Infrastructure as Code (e.g., CDK, Cloud Formation, Terraform, etc.).
• Experience with Git based source code management tools.
• Experience with Agile / Scrum planning tools (GitHub, Azure DevOps, Jira, etc.).
• Experience with Splunk (creation of alerts and dashboards, and comprehensive querying logic).
• Experience with AWS security services: CloudWatch, Security Hub, KMS, Inspector, Guard Duty, Config, CloudTrail.
• Experience with Cloud Security Posture Management (CSPM) tools such as AquaSec, Wiz, Palo Alto Prisma, etc.
• Experience with on-premises and cloud-based networking, firewalls, and network security.
• Experience with working in a DevSecOps environment.

Nice-to-haves

• Preferred certifications: AWS Solution Architect Associate, AWS Certified Security - Specialty, CISSP, CCSP, Splunk Certified Power User.
• Demonstrated engagement in security conferences, training, learning, associations are highly desired and fully supported.

Benefits

• Flexible work schedule with hybrid-friendly options.
• Opportunities for professional development and continuous learning.