Prosyntix is currently recruiting for a Cloud Security Engineer with one of their clients in the Charlotte, NC area. This is an opening for a full-time/permanent position.
- Provide security-based risk assessments of business and technology projects and initiatives that leverages SaaS, PaaS
- Work closely with the DevOps, System support engineer to provide guidance on security weaknesses in the cloud environment
- Research and investigate cyber threats and security incidents in the cloud environment
- Perform comprehensive risk assessment of new or existing cloud service that business needs to use
- Develop a Security strategy, guidelines, configurations for the cloud services
- Ensure optimum efficiencies for the utilization of cloud services.
- Assist in designing, planning, and implementing security tools, controls, policies, and processes
- Review and provide guidance on a Secure Code pipeline for applications in the cloud hosting environment
- Provide management report on security posture of the cloud services
- 5+ yrs. experience in IT with 3+ yrs. in Enterprise Information Security/Risk Assessments
- Good understanding of various cloud services including SaaS/PaaS such as AWS, GCP, Azure, Salesforce, ERP platforms etc
- Deep passion for information security and the desire to constantly learn and grow in the field
- Very good understanding of Cloud Security principals
- Good understanding of industry standard security monitoring tools used in cloud environment
- Self-motivated and able to work well with minimal supervision or in a team environment; consult with team members and management as needed
- Ability to perform analysis of data, processes, policies, procedures and/or systems; produce unambiguous, comprehensive and accurate interpretations
- Familiarity of regulatory requirements (i.e., PCI, HIPAA, GLBA, SOX) and frameworks (e.g., NIST, ISO 27002 etc.)
- Good understanding of at least some of the following
- AWS-GuardDuty, Inspector, AWS Macie, Config, Container Security etc.
- Azure Security Center Storage Service Encryption etc.
- Salesforce Shield, data masking etc.