Cloud Security Engineer III (DevSecOps)

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by CentralSquare Technologies, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Cloud Security Engineer III (DevSecOps) at CentralSquare Technologies will play a pivotal role in ensuring the security of cloud-based applications and infrastructure. This position encompasses the development and implementation of security practices throughout the software development life cycle (SDLC) while collaborating closely with cross-functional teams. The ideal candidate will possess a robust knowledge of cloud security frameworks, DevOps practices, and will actively participate in the identification, assessment, and mitigation of security risks within cloud environments to deliver secure, high-quality software products.

Job Responsibilities

• Design and implement cloud security architectures and best practices to safeguard cloud environments.
• Conduct threat modeling and risk assessments to proactively identify potential security vulnerabilities.
• Integrate security tools and frameworks into CI/CD pipelines to automate security testing.
• Develop and maintain security policies, standards, and guidelines in alignment with regulatory requirements.
• Collaborate with development and operations teams to ensure security is embedded in all phases of the software development life cycle.
• Monitor cloud environments for compliance and security incidents, responding effectively to threats.
• Provide training and support to team members on security best practices and threat mitigation strategies.
• Stay current with industry trends, evolving threats, and emerging technologies related to cloud security.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field; Master's degree preferred.
• 5+ years of experience in cloud security, with a focus on DevSecOps practices.
• Strong proficiency in cloud platforms such as AWS, Azure, or Google Cloud Platform.
• Deep understanding of security frameworks (e.g., NIST, CIS) and compliance regulations (e.g., GDPR, HIPAA).
• Hands-on experience with security automation tools and continuous integration/continuous deployment (CI/CD) pipelines.
• Knowledge of programming and scripting languages (e.g., Python, JavaScript, Bash).
• Relevant certifications (e.g., AWS Certified Security Specialty, CISSP, CISM) are highly desirable.
• Excellent analytical skills and the ability to communicate security risks to non-technical stakeholders.

Technologies & Tools

The Cloud Security Engineer III will work with a diverse array of technologies and tools, including but not limited to cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Familiarity with containerization technologies (Docker, Kubernetes), security information and event management (SIEM) tools, vulnerability scanning tools, configuration management solutions, and automation tools (Terraform, Ansible) is essential for this role. Additionally, proficiency in DevSecOps tools that support continuous security practices will be a critical component of this position.

Ideal Candidates

The ideal candidates for the Cloud Security Engineer III position are highly analytical and detail-oriented professionals who demonstrate a strong passion for cybersecurity and cloud technologies. They should exhibit exceptional problem-solving skills, be proactive in identifying security challenges, and possess the ability to work collaboratively within cross-functional teams. A commitment to continuous learning and adaptability to an ever-evolving technology landscape will set successful candidates apart. They should also have excellent communication skills, enabling them to articulate complex security concepts to various stakeholders within the organization.