Summary of Position:

The Sr. Cloud Security Engineer (Level 3) is a critical member of the Enterprise Security Office - Security Engineering & Archiutecture Team. This role will be responsible for designing, implementing, and maintaining robust cybersecurity solutions for our cloud-based infrastructure. This role will be accountable for providing security engineering solutions and delivering technical leadership for the Information Security - Cloud Security domain. In this role, the Sr. Cloud Security Engineer will be a key contributor to the design and oversight of enterprise cloud security solutions supporting Lennars employees, suppliers, dealers, and business partners. The incumbent will collaborate closely with IT Operations and other Engineering teams to ensure adequate security solutions are in place throughout all IT systems and platforms. This role will drive to achieve and maintain a security posture commensurate with the risk tolerance of the organization, meet business objectives, and satisfy regulatory requirements.

Principal Duties and Responsibilities:

• Demonstrate leadership and technical expertise in planning, ownership, & management of the Organizations cloud security strategy.
• Provide expertise and guidance with securing cloud-nastive application development and delivery platofrms (DevOps, CI/CD) with demonstrated strength in DevSecOps tooling (SAST, DAST).
• Ensure that adequate security tools and controls are deployed for effective protection throughout the Organizations cloud environments
• Satisfy any legal, compliance, and regulatory requirements related to cloud security controls.
• Ensure the development of and adherence to Lennar Security Standards and best practices in all areas of cloud security engineering and operations.
• Contribute to the development of the Cybersecurity Program and Security Engineering and Architecture roadmaps.
• As it relates to Cloud Security, collaborate and provide input to Lennars Cybersecurity teams in the areas of Risk Management, Compliance, and Incident Response.
• Promotes and facilitates effective communication between Security Engineering & Architecture, Enterprise Architecture, Infrastructure, and other departments and/or business units.
• Assist in the acquisition and risk assessment, procurement, and evaluation of new vendor and product selections.
• Evaluate and recommend new and emerging services and technologies.
• Assist with remediation efforts and recommendations as it relates to external and internal security audits.
• Participate as an active member of the Security Incident Response Team, including post-mortem investigation activities.

Education and Experience Requirements:

• Bachelors required, Masters degree preferred in Computer Science, Information Systems Security or related field.
• Certified Information Systems Security Professional (CISSP), Azure Security Engineer Associate, AWS Certified Security-Specialty, Certified Cloud Security Professional (CSSP), GIAC Cloud Security Automation (GCSA), AWS Solutions Architect Professional, or additional advanced security certifications.
• 3 - 5 years of experience with cloud security solutions such as:
• Core security capabilities for protecting IaaS, PaaS, & SaaS services
• Cloud Security Posture Management (CSPM)
• Cloud Access Security Broker (CASB)
• Cloud-Native Application Protection Platforms (CNAPP)
• Security Service Edge (SSE)

Physical Requirements:

This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary.

Additional Requirements:

• Expert knowledge of cloud identity and access controls, including federation between on-premises identities and cloud platforms.
• Expert knowledge of cloud network security fundementals, including securing VNET/VPCs, Web Application Firewalls, and cloud-native Firewall-as-a-Service solutions.
• Experience with Security Information and Event Management Systems (SIEM) and log management systems (Splunk, Exabeam, Microsoft Sentinel).
• Experience with network based vulnerability assessment tools (i.e. Rapid7, Nessus, Retina, Qualys).
• Ability to analyze and communicate strengths and weaknesses of cloud technology solutions, relative to cloud security advanced features and capabilities.
• Experience identifying and analyzing emerging and advanced threats (such as APT, OWASP top-10/20, and others).
• Experience with maturity assessment tools and methodologies in application and cloud security, such as the OWASP Software Assurance Maturity Model or the Cloud Security Maturity Model (CSA).
• Considerable writing proficiency and visual design skills, oral presentation skills, problem solving and decision-making skills.
• Excellent verbal and written communication skills, including executive-level presentations.
• Ability to deal effectively with a wide range of vendors, service providers, and regulatory agencies.
• Ability to facilitate productive meetings and work successfully in a team-oriented environment.
• Ability to exercise sound judgment in complex situations.
• Ability to confidently and simply explain technical security issues without hype or buzzwords.
• Ability to work with technical and non-technical business owners to develop solutions.
• Ability to handle multiple competing priorities in a fast-paced environment.
• Strong commitment to customer service.
• Results oriented, high energy, self-motivated.
• Ability to work well under minimal supervision.
• Some travel may be required for internal, conference, customer, partner and vendor meetings.

This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice.