Job Responsibilities :
- Responsible for implementing technology initiatives to secure our key government client’s cloud environment.
- Be accountable for assisting in strategic planning and architecture and securing enterprise information by identifying network and application security requirements, implementing and testing security controls and procedures.
- Enable Cloud Cybersecurity controls and compliance requirements and remediation programs based on business priorities and risks to address Cyber-Security, Cyber Defense and Business needs of the customer.
Skills and Experience Required :
Required :
- 5+ years’ cyber related experience in a commercial environment with Azure, in a technical information security and risk management role.
- 5+ years managing security policies and initiatives in Azure.
- Knowledge of Identity Access and Management concepts, multifactor authentication, SSO / Federation
- Knowledge of Privileged Access Management key concepts
- Ability to set up and configure the Azure security platforms, and function as an overall lead managing end to end security on the Azure Cloud regions.
- Understanding of Network and Application Vulnerability testing as it relates to Azure systems.
- Experience with security concepts & tools related to CI / CD pipelines, and software scanning.
- Able to demonstrate understanding of Information Security and Risk Management capabilities related to cloud computing across Windows and Linux, with demonstrated direct experience with the following domains :
- Identity, Credential and Access Management (ICAM)
- Authentication and Authorization including SSO and Identify Federation
- Zero-Trust Model
- Defense-In-Depth
- Governance and Compliance
- Securing Data
- Securing the Operating System
- Protecting the Network Layer
- Continuous Diagnostics and Mitigation, Alerting, Audit Trail, and Incident Response
- Cloud Core Platform : Compute, Storage, Networking
Desired :
- Government environments and Gov-Cloud experience
- Experience with CrowdStrike Falcon EDR for Azure
- Ability to Manage / maintain FISMA and FedRAMP compliance for a government information system
- Demonstrated experience collaborating directly with external clients, business leadership, and auditors.
- 5+ years of firsthand working with the various Azure security tools / platforms such as :
- Extended Detection and Response (XDR) : Microsoft Defender for Cloud Apps, Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity
- Data Protection : Microsoft Purview, Microsoft Information Protection, DLP, One Trust, Kubernetes
- Identity and Access Management (IAM) : Zero Trust, Azure IAM and AWS IAM, Entra ID (Azure AD), Multitenant Organization (MTO), Lighthouse, Key Vault, Conditional Assess
- Monitoring Compliance : Sentinel, MDC
- Entra ID (formally Azure AD), M365
Education :
Bachelor’s degree in a technology field, Masters degree preferred.
Certifications :
- CISSP, CCSP, Azure / AWS / Google Security specific Training and Certification
Cloud Security Engineer
A company is looking for a Staff Cloud Security Engineer to enhance cloud security and compliance across its platforms. ...
Security Engineer - Cloud
Digital Site Security team the Cloud Security Engineer. Partners with other Information Security groups to conduct security risk assessments on new solutions and systems, periodic security risk assessments on existing systems; and identifies and/or recommends appropriate security mitigations and bes...
Senior Cloud Security Engineer
A company is looking for a Senior Engineer, Attack Surface and Cloud Security Engineering. Python, PowerShell)Experience with cloud infrastructure automation tools (e. Terraform, CloudFormation)Professional certifications such as CCSP, CISSP, or CEH. ...
Security Engineer - Cloud
As part of the Digital Site Security team the Cloud Security Engineer will be focused on improving the security posture and delivery of new and enhanced security capabilities for our BC and BD properties. Partners with other Information Security groups to conduct security risk assessments on new sol...
Software Engineer III, Infrastructure, Google Cloud Security and Privacy
We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing ever...
Senior Cloud Security Engineer
Certification in one or more of the following technologies: Microsoft Cybersecurity Architect, Microsoft Security Operations Analyst Associate, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, AWS Certified Security Specialty, CCSP, CISSP, CISA, CISM. Microsoft Silicon...
Software Engineer III, Google Cloud Security and Privacy
We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing ever...
Azure - Senior Cloud Security Engineer
Bank of America is looking for an experienced Senior Cloud Security Engineer to join our Azure Cloud Security Operations team. This role will help to build a continuous improvement process as part of the Azure Cloud Security Operations team. You may lead cross functional teams within Global Technolo...
Cloud Security Engineer
Partners with other Information Security groups to conduct security risk assessments on new solutions and systems, periodic security risk assessments on existing systems; and identifies and/or recommends appropriate security mitigations and best practices. Security Engineers develop, design, impleme...
IT Security Engineer - Cloud
The ideal candidate is a collaborative and conscientious engineer with strong vulnerability and security engineering fundamentals. Perform security assessments on cloud deployments in AWS, Azure, and Google. Research security technologies and drive proof-of-concept evaluations to improve network and...