Cloud Security Engineer (Expert Level)

Job Description About the Position:

Cloud Security Engineer Resources are responsible for supporting and reviewing security architecture as part of Client's Information Security program. The Cloud Security Engineer will encompass responsibilities in the following areas: business continuity and disaster recovery, incident response, access control administration, file integrity monitoring, security information and event (SIEM) monitoring, privileged access management, patch and vulnerability management, intrusion prevention/intrusion detection, threat management, cloud security, and support audit activities to comply with Client's security requirements. Cloud Security Engineer Resources do not access Federal Tax Information.

Requirements

Basic Requirements (Mandatory Requirements)

The Proposed Candidate must have;

Bachelor's degree in Engineering, Security or Technology related major, or closely allied field. At least 10 years of information security and engineering experience. Candidates having Formal education in Computer Science, Information Systems, Engineering, Cybersecurity or a related field can be substituted for the following years of experience: Masters Degree : 1 Years

Candidate must have demonstrated expert level experience in the following:

3-5 years of experience as a Cloud Security architect and/or management role or related position. Strong understanding of cloud computing technologies including, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Proficient in designing security controls, security tools needs/assessment. And technology services. Experience working with containerized and micro architecture platform as per the industry best practices. Hands on experience in designing and implementing Security technologies such as SIEM, network firewalls, host-based security and security configuration. Experience in integrating Content Delivery Network (CDN). Familiarity with Cloud Security Posture Management and vulnerability management tools. Experience working with Managed Detection & Response (MDR) providers in setting up and investigating security alerts. Experience with security incident or breach investigation and development of strategies to respond to and recover from an incident or breach. Desired/ Preferred Skills:

Experience in a Health Exchange or its partners would be a plus. CompTia Security+, CISSP or other industry recognized certifications. Experience with administering serverless, cloud-based enterprise applications and environments. Experience with administering Linux and Microsoft server environments. Experience and general understanding of object-oriented coding (Java, Python, .Net, etc.). Familiarity with standards such as OWASP, IRS 1075, CMS MARS-E. NIST, and FISMA. It is desirable to have experience with the following Software and Services:

Cloudflare Azure Sentinel Tenable Nessus Rapid7 Insight Vulnerability Management Microsoft Defender Microsoft Azure Cloud Palo Alto PrismaCloud Palo Alto Firewall Palo Alto Panorama Jira Confluence SolarWinds Orion SolarWinds ServiceDesk PowerShell GitHub