We are seeking a skilled Security Cloud Engineer to join our team. The ideal candidate will be responsible for integrating security practices into our DevOps processes, managing security in our cloud infrastructure, and implementing best practices for Web Application Firewalls (WAF) and other security measures.

A successful candidate will be able to audit our environment for vulnerabilities and prioritize which projects need immediate attention and which ones do not take priority over other ongoing projects.

This role involves collaboration with cloud Architects, development, operations, and security teams to ensure our applications and infrastructure are secure, scalable, and resilient.

• Implement and manage security tools and practices in CI/CD pipelines.
• Automate security testing, vulnerability assessments, and compliance checks.
• Work closely with development teams to ensure secure coding practices.
• Develop and maintain infrastructure as code (IaC) scripts with security best practices.
• Monitor and respond to security incidents and alerts.
• Conduct regular security audits and risk assessments.
• Stay updated on the latest security threats, technologies, and trends.
• Advocate for security culture and practices within the organization.
• Collaborate with cross-functional teams to design and implement security solutions.
• Develop and manage Web Application Firewall (WAF) rules and best practices.
• Assist with security incident response and remediation.
• Optimize and maintain security configurations for cloud services.

• Bachelor’s degree in computer science, Information Security, or 5+ years commensurate experience
• Relevant security certifications such as CISSP, CISM, CEH, or AWS Security Specialty are preferred.
• 5+ years of experience in security engineering, DevSecOps, or a related field.
• Experience implementing security in CI/CD pipelines.
• Hands-on experience with security automation tools and practices.
• Experience with cloud security best practices across AWS and Azure.
• Experience conducting security audits, vulnerability assessments, and incident response.