Senior Lead, Cloud Security Engineering

Tasks

• Design, deployment, architecture, and processes for the platform (ASR/Solar, Azure, Oracle, and VMware), as well as hybrid and multi-cloud strategy.
• Actively participate in or lead a team in the design and implementation of secure cloud platforms.
• Provisioning of security solutions; design and implementation of security controls for cloud environments.
• Conducting security assessments and audits of cloud security policies.
• Collaborate with other teams (network, infrastructure, etc.) to integrate security controls.
• Incident Response: Participate in the investigation of security incidents in cloud environments and support the organization's incident response process.
• Compliance and Regulation: Ensuring that solutions comply with relevant regulatory standards (e.g., GDPR, SOX) for cloud security.
• Awareness: Stay up to date on emerging threats in cloud security and industry best practices, and use this knowledge to improve your security posture.
• Design, deployment, and security aspects of cloud platforms (Azure, Oracle, and hybrid and multi-cloud strategies).
• Collaborate with stakeholders across the entire company to identify, prioritize, and implement cloud security solutions that align with the organization's risk profile and regulatory requirements.
• Develop and maintain a comprehensive cloud security strategy, including policies, standards, and procedures, to ensure secure and efficient cloud operations.
• Leading and managing a team of cloud security engineers, including mentoring, coaching, and opportunities for professional development.
• Collaborate with cross-functional teams, including Finance, Legal, Compliance, and business units, to drive the adoption of cloud security best practices and integrate security into the overall business strategy.
• Monitoring and assessing the cloud security landscape; identifying potential threats, vulnerabilities, and areas for improvement.
• Ensuring compliance with relevant regulations, industry standards, and internal policies related to cloud security.
• Development and maintenance of security documentation, including policies, procedures, and incident response playbooks.
• Threat Hunting: Monitoring security events, conducting investigations, and utilizing threat intelligence feeds.
• Automation: Development of playbooks and scripts for automated threat detection and response.
• Compliance: Ensuring adherence to industry regulations (e.g., GDPR, HIPAA) and internal policies.
• Documentation: Maintaining detailed security policies, incident reports, and lessons-learned documents.
• Management: Support incident response teams to ensure a timely resolution and a post-incident review.
• Collaborate with engineering, architecture, and operations teams to ensure a secure and compliant cloud infrastructure.
• Definition and implementation of security policies and controls for cloud-based applications and services.
• Support in the development of training and communication programs to raise awareness of safety.
• Conducting regular risk and vulnerability assessments.
• Maintaining a robust inventory of cloud assets and their security configurations.
• Monitoring and reporting on security metrics and KPIs.
• Ensuring compliance with regulatory requirements.

Requirements

• At least 5 years of experience in design, deployment, and architecture in state-of-the-art cloud environments.
• Master