Lead Cloud Security Engineer

Job Summary

As a Lead Cloud Security Engineer within our telecommunications company, you will be responsible for ensuring the security of our cloud infrastructure, particularly within public cloud environments. Your expertise will be crucial in designing, implementing, and maintaining advanced security measures to safeguard our cloud-based systems and data against sophisticated cyber threats and vulnerabilities. You will lead efforts to assess risks, develop security solutions, and enforce compliance with industry standards and regulations, collaborating closely with cross-functional teams and mentoring cloud security engineers.

Responsibilities

• Cloud Security Architecture: Design and implement robust security architectures for cloud environments, incorporating cloud security posture management, vulnerability management, network detection and response, and other security capabilities aligned with best practices, industry standards, and regulatory requirements.
• Security Implementation: Deploy and configure security tools and technologies, including cloud security posture management, vulnerability management, and network detection and response solutions, to protect cloud infrastructure. This includes firewalls, intrusion detection/prevention systems (IDS/IPS), encryption mechanisms, access controls, and identity management solutions.
• Threat Detection and Response: Develop and maintain monitoring systems for detecting and responding to security incidents and breaches in cloud environments, leveraging cloud security posture management, vulnerability management, and network detection and response capabilities. Conduct regular security assessments, vulnerability scans, and penetration tests to identify and mitigate risks.
• Security Automation: Implement automation scripts and tools, integrated with cloud security posture management, vulnerability management, network detection and response, and other security solutions, to streamline security processes, enhance incident response capabilities, and enforce security policies across cloud deployments.
• Compliance and Governance: Ensure compliance with relevant regulatory requirements (e.g., GDPR, HIPAA, PCI DSS) and industry standards (e.g., ISO 27001, NIST) pertaining to cloud security. Establish and maintain documentation for security policies, procedures, and controls, using insights from cloud security, vulnerability management, and threat detection tools.
• Security Training and Awareness: Provide leadership in guiding and training internal teams on cloud security best practices, threat mitigation strategies, and compliance obligations. Foster a culture of security awareness and accountability throughout the organization, leveraging insights from cloud security, vulnerability management, threat detection, and other security sources.
• Collaboration and Communication: Work closely with cross-functional teams, including IT operations, development, and compliance, to integrate security measures into cloud-native and hybrid cloud environments. Communicate effectively with stakeholders to convey security risks, recommendations, and status updates, leveraging insights from cloud security, vulnerability management, threat detection, and other security tools.
• Understand cloud usage patterns and trends, cloud pricing models, and cost management tools. 
• Mentorship and Leadership: Mentor cloud security engineers, providing guidance, support, and professional development opportunities. Lead security-related projects and initiatives, ensuring timely and effective completion.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field (Master's degree preferred).
• 7+ years' of experience in Information Technology
• 5-7 years of experience in cloud security engineering roles, with a focus on public cloud environments.
• Hands-on experience with security tools and technologies, including cloud security posture management, vulnerability management, network detection and response, SIEM, DLP, WAF, CASB, and endpoint security solutions.
• Proficiency in designing, implementing, and managing security controls within cloud platforms, such as IAM, VPC, Zero Trust principles, IaC, IAAS, Security Groups, Key Management Services, SDLC, Ci/Cd pipelines and Network Security.
• Strong understanding of networking concepts, protocols, and architecture, with the ability to troubleshoot complex security issues.
• Familiarity with scripting languages (e.g., Python, PowerShell) and automation frameworks for security orchestration and configuration management.
• Industry certifications in cloud security (e.g., CCSK, CCSP, GCP Professional Cloud Security Engineer, AWS Certified Security - Specialty) are highly desirable.
• Excellent analytical, problem-solving, and communication skills, with the ability to work effectively in a dynamic, fast-paced environment.