26-4003: Cloud Security Engineer

Details

• Support security configuration and monitoring across AWS
• Perform secure configuration reviews covering IAM, network security, logging, and monitoring.
• Identify misconfigurations and provide remediation guidance aligned with security best practices.
• Monitor and triage CSPM alerts and findings.
• Conduct risk analysis of vulnerabilities and misconfigurations.
• Support remediation efforts and validate corrective actions.
• Maintain dashboards and security posture reporting metrics.
• Cloud Security, Infrastructure security, Coding experience. AWS, Crowd strike, Teleport.
• Monitor and analyze EDR alerts and threats.
• Support containment, investigation, and escalation processes.
• Assist in incident response (IR) activities and documentation.
• Perform alert monitoring, prioritization, and triage across cloud, endpoint, and email systems.
• Tune detection rules to reduce false positives and improve efficiency.
• Ensure timely response aligned with SLAs and security procedures.
• Implement security best practices including least privilege IAM, encryption, and vulnerability management.
• Align cloud environments with compliance and security standards.
• Recommend continuous improvements to overall security posture.
• Develop automation scripts using Python.
• Improve operational efficiency in alert handling, reporting, and remediation workflows.
• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 7+ years of experience in Cloud Security / Security Operations.
• Hands-on experience with AWS, Azure, GCP, or OCI security services.
• Strong knowledge of IAM, network security, and cloud-native security controls.
• Experience with CSPM tools and EDR platforms.
• Understanding of email security protocols (SPF, DKIM, DMARC).
• Familiarity with SIEM tools and incident response processes.
• Proficiency in scripting (Python, PowerShell, or Bash).
• Certifications such as AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP.
• Experience with automation, SOAR platforms, or DevSecOps practices.
• Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).