Cloud Security Engineer
Skills
About the Role
You will design, develop and operate cloud security technical solutions in line with cloud security policies, standards, and architecture guidelines. You will conduct security audits of the company's cloud environment covering network, configuration, permissions, and data, identifying risks and driving their remediation. You will take charge of daily vulnerability management for cloud security and help build out the container security system. You will develop and roll out key rotation strategies, and monitor the security status of cloud infrastructure, working closely with the technical team to respond to and investigate alerts flagged by the SOC.
Requirements
- Familiar with various AWS services including IAM VPC Security Group NACL LB KMS Secret Manager
- Proficient in using tools such as AWS Security Hub GuardDuty Inspector Config and IAM Access Analyzer
- Familiar with EKS security such as Pod security policies
- Skilled in using and operating container security tools like Falco and their rules
- Familiar with cloud security technologies such as CSPM CIEM and CNAPP
- Have experience in conducting cloud infrastructure risk assessments and vulnerability analysis
- Have participated in emergency response to cloud security incidents
- Possess excellent analytical thinking ability and problem-solving skills
- Have effective time management and organizational abilities
Responsibilities
- Design develop and operate cloud security technical solutions in accordance with cloud security policies and standards
- Undertake security audits of the cloud environment covering network configuration permissions and data
- Identify security risks and promote their handling
- Take charge of daily vulnerability management for cloud security
- Take charge of the construction of the container security system
- Develop key rotation strategies and promote their implementation
- Monitor the security status of cloud infrastructure
- Cooperate with the technical team to respond to and investigate alerts emphasized by the SOC