Cloud Security Engineer
US Corp2Corp · St. Louis, MO, us ·
- Category
- Security
- Experience
- 3+ years
US Corp2Corp · St. Louis, MO, us ·
Position: Cloud Security Engineer
Duration: 6+ months
Location: St. Louis, MO, 63167
Must Have:
Cloud Security Automation Engineer
Client is seeking a Cloud Security Automation Engineer with deep technical experience in securing cloud technologies.
The successful candidate possesses out of the box thinking, the ability to collaboration with development team members, and experience with automation and solving end to end application/infrastructure security problems.
Our mission is to design and build a highly secure cloud environment without sacrificing our developers’ ability to quickly innovate and deliver world class software solutions.
Responsibilities:
• Define security best practices for our cloud platform and provide guidance to development teams.
• Build tools to monitor for compliance of security policy and automate the resolution process.
• Evangelize security throughout the enterprise and collaborate to help architect secure applications.
• Research emerging technologies and build proof of concepts to investigate better ways of meeting our control objectives.
• Collaborate with incident response, risk and compliance, product security and development teams to solve critical security problems.
• Develop an AppSec pipeline and integrate it into the agile software development process.
Required Qualifications:
• BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field or equivalent experience.
• At least 3 years of experience in Information Security and/or infrastructure
engineering.
• An accomplished security practitioner with a strong understanding of industry trends in all areas of security.
• Experience with building IaaS cloud based solutions including AWS, Azure, etc.. and knowledge of their network security and IAM models.
• Experience working with security vendors including evaluating and implementing new products.
Desired Qualifications:
• Expertise in common AWS services (CloudFormation, Route53, VPC, EC2, Lambda, etc...) and their security best practices.
• Programming experience in JavaScript, Java, Scala, Python, Perl, Ruby, etc.. and their use in automating security and compliance.
• Strong understanding of security technologies including host and network based protection and detection technologies.
• Experience with vulnerability management (including: running vulnerability scans, creating reports, communicating with asset owners and giving remediation guidance).
• Experience with continuous integration and automation tools (e.g. Jenkins, Chef, Puppet, Ansible).
• Experience writing security white papers and/or presenting security products and technologies to diverse audiences.
• CISSP or CSSLP (Certified Secure Software Lifecycle Professional) certification.
Must Have:
All your information will be kept confidential according to EEO guidelines.