Senior Cloud Security Engineer (Nashville, TN)

Unclassified - Nashville, TN

Full-time - Mid Level

Nashville, TN

About the position

The Senior Cloud Security Engineer position in Nashville, TN, is a critical role responsible for developing and maintaining cloud security standards and processes in collaboration with architects and system engineers. This position requires securing business applications and computing environments across various cloud infrastructures, including public, private, and hybrid models. The engineer will oversee security configuration settings and operations to mitigate risks to enterprise systems and accounts, ensuring robust security measures are in place. In this role, the engineer will plan, design, and implement security measures for cloud infrastructures, specifically focusing on AWS, Azure, and GCP. They will evaluate and design Cloud Access Security Brokers (CASB) solutions and work closely with networking and operations teams to design secure virtual private networks (VPNs), IPsec, SSL/TLS, LDAP, and public key infrastructure (PKI). The position also involves configuring security for Docker, Kubernetes, and AWS CloudTrail, as well as developing strong security controls for cloud-based enterprise applications. The Senior Cloud Security Engineer will assist in reviewing and implementing security configurations for data flow across environments and manage remediation efforts highlighted by security audits or assessments. Regular participation in technical project and implementation meetings is expected, serving as a security consultant to guide secure application and infrastructure configurations. The engineer will actively monitor, assess, and recommend initiatives based on emerging threats to cloud computing environments, maintaining strong oversight with cloud computing vendors and managed service providers to mitigate risks. Additionally, the engineer will escalate any discovered weaknesses to security management and business unit leads, participate in incident response activities, and provide mentorship and leadership to team members. Outstanding technical skills across various security domains are essential, along with the ability to collaborate with a diverse business and IT community across multiple countries and functional units. Sound project management skills are also a plus for this position.

Responsibilities

• Develop and maintain cloud security standards and processes in tandem with architects and system engineers.
• Secure business applications and computing environments across public, private or hybrid cloud infrastructures.
• Provide oversight of security configuration settings and security operations to reduce risk to enterprise systems and accounts.
• Plan, design and implement the security for cloud infrastructures specifically AWS, Azure and GCP.
• Evaluate and design Cloud Access Security Brokers (CASB) solutions.
• Work with networking and operations teams to design virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI).
• Configure security for Docker, Kubernetes and AWS CloudTrail.
• Develop strong security controls to implement across cloud-based enterprise applications and computing environments.
• Assist with review and implementation of security configuration of data flow across environments.
• Manage remediation efforts highlighted by security audits or assessments.
• Attend regular technical project and implementation meetings and serve as a security consultant to help guide secure application and infrastructure configurations.
• Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to cloud computing environments.
• Assist in maintaining strong oversight with cloud computing vendors, solution providers and managed service providers to safeguard against undue risk presented by external entities.
• Escalate to security management and business unit leads when points of weakness are discovered.
• Participate in incident response activities to track occurrence and resolution, with strict documentation and reporting as well as engagement with security operations and incident response teams.
• Serve as a mentor and provide leadership to others on the team.

Requirements

• Bachelor's degree required or equivalent work experience.
• 5 or more years of applicable security experience.
• Ability to write scripts in languages such as Python, BASH, or PowerShell for automation.
• Proven technical skills in multiple information security domains.
• Knowledge and understanding of modern cyber threat actors, their motivation, scenarios, tools, tactics and procedures.
• Experience with cloud infrastructures specifically AWS, Azure and GCP.
• Experience with architecture, engineering and design principles.
• Network and encryption experience, including virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI).
• Familiarity with Docker, Kubernetes and AWS CloudTrail.

Benefits

• An opportunity to be a part of a great culture.
• An awesome team.
• A challenging work environment.