Sr. Cloud Security Engineer

$195,520 - $195,520/Yr

Horizontal Talent - Boston, MA

Full-time - Senior

Boston, MA

About the position

As a Senior Cloud Security Engineer, you will be integral to our DevSecOps practice, focusing on delivering secure cloud architectures for migration, optimization, and deployment. This role involves identifying and implementing secure cloud solutions, monitoring cloud environments, and ensuring compliance with industry standards while balancing security with usability.

Responsibilities

• Identify and implement secure cloud-based solutions including zero-trust architectures and identity management policies.
• Monitor cloud environments for suspicious activities using cloud-native monitoring or SIEM solutions.
• Investigate security incidents and perform root cause analysis.
• Examine infrastructure as code and analyze associated risks.
• Ensure systems are secure against cybersecurity threats through risk assessment and compliance with standards like NIST and ISO.
• Automate security processes such as vulnerability and patch management.
• Collaborate with software developers and DevSecOps engineers to ensure adherence to security processes.
• Support enterprise cloud security through infrastructure as code and automated configurations.
• Design and implement data protection and encryption mechanisms for data at rest and in transit.
• Document the current state of the environment and perform gap analysis to produce recommendations.
• Identify and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor junior team members.
• Engineer and implement solutions for continuous improvement and provide regular status updates.

Requirements

• Ability to obtain a U.S. government Security Clearance.
• BS Degree in an IT field or BS in a non-IT field with 2 years related IT experience.
• 5 Years of Experience architecting, designing, developing, and implementing cloud solutions.
• 5 Years of Experience with one or more clouds (AWS, Azure, or GCP).
• 5 Years of Experience with Git SCM providers (GitHub, GitLab, Bitbucket).
• 5 Years of Experience in an Agile development environment.
• 5 Years of Experience implementing infrastructure as code and orchestration.
• 5 Years of Experience conducting monitoring, risk assessment, threat modeling, and security testing in cloud environments.
• 5 Years of Experience documenting POAMs, SSPs, and A&A support documentation.

Nice-to-haves

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Associate
• Microsoft Certified Azure Administrator Associate
• Certified Information Systems Security Professional (CISSP)
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby.
• Experience with automation tools like Pivotal, Chef, Terraform, CloudFormation, or Ansible.
• Excellent written and verbal communication skills.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Retirement plan