What are the responsibilities and job description for the Cloud Security Engineer position at Tandym?
The Cloud Security Engineer is responsible for designing, implementing, and managing security solutions in our cloud infrastructure. This role requires a deep understanding of cloud security best practices, a proactive approach to identifying vulnerabilities, and a commitment to ensuring the security and compliance of our cloud environments.
What will you provide?
- Develop and implement security strategies and solutions for Azure, AWS, and Google Cloud environments, focusing on network security, identity and access management, and data protection.
- Leverage automation, Infrastructure as Code (IaC), and continuous compliance strategies. Interface with DevSecOps teams to define and implement security and compliance requirements for production CI / CD pipelines.
- Conduct risk assessments and vulnerability analyses for cloud infrastructure, identify potential threats, and recommend appropriate mitigation strategies.
- Implement and manage Microsoft Purview for data governance, ensuring effective data classification, encryption, and compliance with data loss prevention (DLP) policies.
- Utilize Microsoft Intune for endpoint management, ensuring secure and compliant configurations across all devices.
- Collaborate with IT teams to implement security measures within Azure and Microsoft 365, including setting up multi-factor authentication (MFA), configuring security groups, and managing conditional access policies.
- Work closely with other IT teams to integrate security practices into development and operational processes, providing guidance and training on cloud security best practices to stakeholders.
- Oversee SOC activities in monitoring cloud environments for security incidents and responding to alerts. Provide leadership and ensure effective incident response and remediation, staying informed of all incidents and ensuring the SOC MSSP meets performance expectations.
- Utilize automation tools and scripting (e.g., PowerShell) to streamline security processes, manage security configurations, and enhance overall efficiency.
- Ensure cloud environments comply with industry standards, regulations, and best practices (e.g., HIPAA, NIST), and assist in maintaining compliance certifications and preparing for audits.
- Create and maintain comprehensive security policies and procedures for cloud operations.
- Develop and deliver targeted security training and awareness programs to ensure staff are well-informed and compliant with best practices.
- Deep knowledge of cloud security best practices across major platforms (Azure, AWS, Google Cloud).
- In-depth understanding of risk management and vulnerability analyses of cloud infrastructure.
- Proficiency in network security, identity and access management, and data protection within cloud environments.
- Ability to create and deliver effective security training and awareness programs.
- Experience in leading cross-functional incident response efforts, including coordination with legal, compliance, and executive teams.
- Proficiency in using automation tools and scripting languages (e.g., PowerShell) to enhance security processes and efficiency.
- Ability to work in and manage ambiguity, including dealing effectively with issues that do not always have a process, system, or solution in place.
Education and Experience Requirements
Certified Information Systems Security Professional (CISSP)
Implementing and / or materially maturing an existing Cloud Security program.
