51 applicants

Company

Original Job Post

The Estée Lauder Companies Inc. · 2 days ago

Cloud Cybersecurity Sr. Engineer

New York, NY

Full-time

Onsite

Senior Level

$98K/yr - $166K/yr

8+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Personal Care Product Manufacturing

Insider Connection @The Estée Lauder Companies Inc.

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Acting as a key player for Cloud Security strategy, design, implementation across IaaS, PaaS and SaaS.

Defining technical security workloads related to cloud workloads that require integration with security event monitoring, IAM, security groups, data and information patterns, CI/CD pipelines, Kubernetes, systems integration, and others.

Driving overall strategy and implementation of security processes, procedures, governance through a combination of preventive and reactive controls and policies in a multi-cloud environment

Working closely with application teams, Cloud Engineering and other infrastructure teams to support and implement security at every level of Cloud.

Defining the preventative and detective guardrails for all IaaS, PaaS and SaaS environments.

Defining and establishing automated Guardrails and Shift left in the enforcement of our Security policies.

Providing guidance and support to development teams in the secure design and implementation of cloud applications.

Developing Terraform, ARM Template, Azure Policy and integrate Security into our IaC pipelines to automate and enforce adopted cloud security policies, standards, and procedure.

Conducting regular security assessments and audits of cloud infrastructure and applications.

Staying up to date with emerging threats, vulnerabilities, and best practices in cloud security.

Proactive introduction of security guidelines to development teams and work with the teams to implement security patterns.

Acting as a resource for the team at large with regards to security best practices, techniques, and lessons learned

Providing insights and advice into the maintenance of security policies and standards for all deployment environments.

Supporting the Security Operations Center for any relevant incidents.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

CybersecurityCloud EngineeringPublic Cloud Platforms AWSPublic Cloud Platforms AzurePublic Cloud Platforms Google CloudInformation Security ManagementNetworksInfrastructure as Code ARM TemplatesInfrastructure as Code TerraformInfrastructure as Code AnsibleScripting Languages PythonScripting Languages PowerShellScripting Languages ShellTechnical WritingCloud Services ConnectivityProblem-SolvingAnalyticalOrganizationalCommunication

Required

Minimum of eight (8) years of relevant cybersecurity expertise and eight (8) years of relevant Cloud Engineering expertise

Bachelor's degree in a related field or equivalent demonstrated experience and knowledge

Strong experience deploying and supporting public cloud platforms such as AWS, Azure, and Google Cloud Platform with the majority of experience in Azure

Experience with managing information security functions including governance, frameworks, processes, tools, scorecards & dashboards

Excellent experience and knowledge with multi-tiered networks, network services, common ports, and protocols used in those communications

Strong analytical and organizational skills

Ability to communicate east-west across multiple diverse teams in both focus, skillset, and geo-location

Proficiency in developing and reviewing Infrastructure as Code including ARM Templates, Terraform, and Ansible

Proficiency in scripting languages such as Python, PowerShell, or Shell programming

Strong verbal and written communication skills that include the ability to describe highly technical concepts in non-technical terms

Knowledge of cloud services secure connectivity techniques and services