Senior Cloud AWS Security Engineer @ SquareOne in SquareOne

Remote Senior Cloud (AWS) Security Engineer

As a Senior Cloud Security Engineer, you will be part of the Information Systems Security team. We are a team of 40 engineers distributed across the globe with expertise in Cloud Security, Endpoint Protection, Network Security, Remote Access Management, etc.

In your day to day work, you will collaborate with a cross-functional product team to develop, operate and improve the platform and security capabilities needed to support the variety of solutions building in the Cloud. You will also work with the wider engineering team to bring solutions to challenges, while ensuring security is met at all times. You will work closely with the engineering teams to explain potential attack vectors and provide remediation recommendations.

Our

Requirements:

• Hands-on experience with core AWS cloud services (networking, storage, DB and compute) 
• Solid understanding of AWS security architecture design and ability to create reference implementations 
• Proven hands-on experience in developing and implementing security features at scale in multi-tenant platforms using AWS native security services like GuardDuty, Security Hub, etc. 
• Familiarity with security frameworks and experience in performing technical gap analysis 
• Strong knowledge of the software development lifecycle, including CI/CD to deploy security mechanisms 
• Working knowledge of Git, Terraform and Python and familiarity with Jenkins and Rundeck 

Nice to have:

• Familiarity with other clouds like GCP, Azure or Alicloud 
• Experience in data analysis and using insights to drive decision-making 
• Experience in reviewing code for quality and security compliance 
• Experience in performing penetration testing activities 
• Experience developing infrastructure as code that is fully tested: unit/functional/smoke tests using inspec/pytest or similar tooling 

Remote Senior Cloud (AWS) Security Engineer

As a Senior Cloud Security Engineer, you will be part of the Information Systems Security team. We are a team of 40 engineers distributed across the globe with expertise in Cloud Security, Endpoint Protection, Network Security, Remote Access Management, etc.

In your day to day work, you will collaborate with a cross-functional product team to develop, operate and improve the platform and security capabilities needed to support the variety of solutions building in the Cloud. You will also work with the wider engineering team to bring solutions to challenges, while ensuring security is met at all times. You will work closely with the engineering teams to explain potential attack vectors and provide remediation recommendations.

,[Collaboratively, develop and improve the security features and engineering capabilities (automatic deployment pipelines, secure controls and guardrails, abstraction layers to ease Cloud adoption, delegation capabilities to enable self-service functionality to end customers) , Leverage every opportunity to use your coding skills to implement automated security solutions and avoid click ops , Drive through all stages of the software development lifecycle, from requirements gathering and discussions with the Product Owner/Customer to the implementation and deployment of the security features in production using CI/CD , Act as a security consultant and evangelist , Provide software security architecture and insight for propositions, product designs and service enhancements , Lead efforts to implement security policies and remediation processes , Use standard security frameworks to perform gap analysis and work with the platform team and customers to their resolution , Collaborate with engineering teams to level up security across the platform , Engage with the wider Security teams to continually evolve how we protect customers' data within the platform , Help the team drive decisions around technologies, development patterns, automation framework and new approaches to ease the security adoption going forward ]

Requirements: Cloud, AWS Cloud, AWS, Security, Git, Terraform, Python, Jenkins, GCP, Azure, Infrastructure as Code, pytest