Cloud Security Engineer

The cloud security engineer is responsible for solidifying our security posture on AWS. This role focuses on proactive security assurance and control implementation, ensuring our cloud environment remains robust against evolving threats.
Responsibilities:
Design, implement, and continuously improve security controls for our AWS environment, adhering to industry best practices (e.g., PCI-DSS, SOC 2).
Conduct comprehensive security assessments of our cloud infrastructure, identifying and mitigating potential vulnerabilities.
Develop and maintain a robust security architecture leveraging native AWS security services (IAM, KMS, Security Hub etc.).
Collaborate with the DevOps team to integrate security considerations throughout the infrastructure as code (IaC) pipelines and deployment processes.
Define and implement security policies and procedures for secure cloud resource provisioning, access management, and data protection.
Continuously monitor the effectiveness of security controls through automated testing and manual assessments.
Stay updated on the latest cloud security threats and proactively adapt control strategies to mitigate emerging risks.
Design, implement, and test Disaster Recovery (DR) plans for our AWS environment to ensure business continuity in the event of an outage.
Support security compliance initiatives and audits, ensuring adherence to relevant security regulations.
Maintain and document security configurations and controls for future reference and knowledge transfer.