Sr.Cloud Security Engineer

Position Summary:

As a Cloud Security Engineer, you will require deep technical expertise in cloud security frameworks, hands-on experience with any security and SIEM tools and the ability to guide enterprise-wide security initiatives. The role will require you to drive our cloud security strategy, architecture, and implementation across multi-cloud environments including but not limited to the management of the security tooling used for exposure management, threat hunting and cloud security posture management across multi-cloud environments. The role requires partnership with multiple groups including SOC, threat intelligence management, exposure management, cloud operations, cloud engineering and architecture teams on related activities, which can include incorporating other intelligence from various sources, assess the relevance, and provide actionable insights to enhance our cybersecurity posture.

Accountabilities:

• Cloud Security Tool Management- Manage and optimize cloud security platforms such as CSPM, CWPP, CNAPP, and SIEM integrations, including security policies, controls, and rule sets.
• Security Governance & Compliance-Ensure compliance with frameworks and standards such as SOC 2, ISO 27001, CIS Controls, OWASP, and GDPR through security assessments, reviews, and audits.
• Incident Response & Threat Investigation-Investigate cloud security incidents, anomalies, and breaches, and support response and remediation efforts in collaboration with security and engineering teams.
• Cross-Functional Collaboration-Partner with SOC, Threat Intelligence, Architecture, Engineering, and Vulnerability Management teams to strengthen cloud security posture and address emerging threats.
• Security Architecture & Documentation-Recommend secure cloud architectures, define technical security requirements, maintain security documentation and runbooks, and support continuous improvement of security controls.

• Strong 10+ years’ experience with Azure, AWS, and/or GCP, including cloud security best practices and security architecture.
• Hands-on experience with CrowdStrike Falcon Cloud Security (preferred) or equivalent CSPM/CNAPP solutions such as Prisma Cloud, Wiz, or Orca Security.
• Knowledge of Kubernetes, containers, serverless environments, IAM, SSO, networking security, and experience with SIEM, SOAR, vulnerability management, and endpoint protection tools.
• Proficiency in Terraform, CloudFormation, Python, and PowerShell for infrastructure automation, security monitoring, and operational efficiency.
• Strong foundation in network security, cryptography, web application security, and security testing, supported by certifications such as CISSP, CCSP, CEH, along with excellent analytical, troubleshooting, and communication skills.

Syngenta is an Equal Opportunity Employer and does not discriminate in recruitment, hiring, training, promotion or any other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, marital or veteran status, disability, or any other legally protected status.

#LI-Hybrid