78 applicants

Company

Original Job Post

Commonwealth Financial Network · 5 days ago

Cloud Security Engineer

Waltham, MA

Full-time

Hybrid

Senior Level

$125K/yr - $140K/yr

5+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Financial Services

Actively Hiring

Insider Connection @Commonwealth Financial Network

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Deploy various security measures such as firewalls, encryption, and access controls to protect data and resources in the cloud

Ensure that the cloud architectures are designed with recommended security practices and standards following the principles of Cloud Adoption Framework. Working closely with application, network, and security teams to ensure that requirements are reflected appropriately in cloud architecture and design patterns

Assess and mitigate risks associated with cloud services while ensuring compliance with relevant regulations and standards, such as NIST-CSF, ISO2700x and other compliance requirements

Developing, implementing, and testing procedures for data backup and recovery as well as disaster recovery

Measure cloud security posture against assigned polices are monitored continuously, implement security controls aimed at improving the score and manage any configuration drifts that deviates from desired security measures

Write and maintain clear, concise documentation, runbooks, and operational standards, including infrastructure diagrams

Act as a subject matter expert in Cloud Security area by organizing awareness sessions and training on a regular basis; educate and mentor product teams and junior engineers

Work closely with other IT professionals, such as network engineers, system administrators, and developers to integrate security practices into all aspects of the cloud infrastructure

Provide escalation-level support for the IT organization and the corporate HelpDesk; troubleshoot issues identified during the delivery of new or existing systems and resolving them in a timely manner

Participate in several business projects to design, implement, and test security controls against functional workloads

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cloud securityAWSAzureGCPCSPMCWPPIAMIaCRegulatory complianceScriptingAutomationAttention to detailCommunicationProblem-solvingAgile/ScrumContinuous IntegrationContinuous Delivery

Required

5+ years’ experience in a security engineering role protecting cloud workloads, including IaaS, PaaS, and SaaS models

Experience with commercial cloud offerings such as AWS, Azure and GCP

Experience with implementing Cloud Security Posture Management (CSPM) and Cloud Workload Protection Products (CWPP)

Strong attention to detail and an ability to manage and keep track of multiple tasks simultaneously

Ability to work with infrastructure and application development teams to provide pragmatic security solutions and implement them within project timelines

Experience in integrating IAM with cloud-hosted workloads

Experience in implementing security through Infrastructure-as-code (IaC)

Knowledge of securing Cloud-native technologies

Knowledge of networking topologies and engineering, including DNS, Active Directory, Active Directory Federation Services (ADFS), firewalls, load balancers, and gateway devices

Experience working with regulated environments (PCI, HIPAA, etc.)

Ability to communicate and present complex information to technical and nontechnical stakeholders, both verbally and in writing

Scripting knowledge that is aimed towards automation (E.g.: Bash scripting, PowerShell, Python etc.)