Sr Cloud Security Engineer (Runtime) - NO C2C/NO SPONSORSHIP

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by Randstad Sourceright, so some details may not match this job. The employer's own page has the real description.

Job Overview

The Sr Cloud Security Engineer (Runtime) at Randstad Sourceright is responsible for the development and implementation of security measures to protect cloud-based systems and applications throughout their entire lifecycle. This role entails a proactive engagement with DevOps teams to integrate security practices into the CI/CD pipeline, conducting threat modeling, and ensuring compliance with industry standards and regulations. The engineer will analyze potential security incidents and develop mitigation strategies while collaborating closely with cross-functional teams to secure runtime environments effectively.

Job Responsibilities

• Develop and implement security policies and procedures for cloud environments.
• Conduct security assessments and audits of cloud applications and services.
• Collaborate with DevOps teams to integrate security practices into the software development lifecycle.
• Perform threat modeling, vulnerability assessments, and penetration testing.
• Monitor security incidents and respond to alerts in a timely manner.
• Ensure compliance with industry regulations and internal security standards.
• Provide education and training to development teams on security best practices.
• Develop automated security tools and scripts to enhance security workflows.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in cloud security engineering, preferably within public cloud environments (AWS, Azure, GCP).
• Strong understanding of cloud architecture and its security considerations.
• Experience with security compliance frameworks (e.g., ISO 27001, NIST, CIS benchmarks).
• Proficiency in security tools and technologies (e.g., SIEM, IDS/IPS, firewalls).
• Knowledge of programming/scripting languages (e.g., Python, Bash, Go) for automation.
• Relevant security certifications (e.g., CISSP, CISM, CCSP) would be advantageous.

Technologies & Tools

The ideal candidate will have experience working with a variety of technologies and tools related to cloud security. Key tools may include AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, container security platforms (e.g., Aqua Security, Twistlock), and various SIEM solutions. Familiarity with infrastructure as code (IaC) tools such as Terraform and CloudFormation is also essential for developing secure cloud environments.

Ideal Candidates

The ideal candidate for this position possesses a strong analytical mindset, enabling them to identify and mitigate potential security threats effectively. They exhibit excellent communication skills, allowing for seamless collaboration with technical and non-technical stakeholders. A proactive attitude towards continuous improvement and staying current with emerging security trends is vital. Candidates should also demonstrate a strong commitment to upholding security best practices and a passion for building secure cloud systems.