Cloud Security Engineer

CloudHesive is an Amazon Premier Partner and Amazon Managed Services Partner founded by veterans in the cloud technology space. We help our customers adapt and transform their organizations by leveraging the power of the public cloud ecosystem through consulting and next generation managed services, with a focus on Operational Excellence, Security, Reliability, Performance Efficiency and Cost Optimization.

Our employees are the foundation of our success, and we invest in them! We are growing fast and have built a phenomenal team through in-depth training, partner events, community involvement, mentoring, and much more. We move quickly, act decisively, and communicate openly to drive a collaborative environment and our customers´ success. With offices in the U.S. and Latin America, you’ll work with industry experts on revolutionary technology solutions deployed successfully around the globe.

The Opportunity:

We are seeking a Cloud Security Engineer to support and secure client environments across AWS and hybrid infrastructures. In this role, you will work closely with our Cloud Operations (TechOps) team to monitor, investigate, and remediate security events while continuously improving the security posture of customer environments.

This role involves working across multiple customer environments and supporting security monitoring, network security infrastructure, compliance programs, and cloud security reviews.

What you’ll be doing:

Monitor and respond to security alerts and incidents across multiple customer environments.

Implement and maintain AWS security controls including IAM, VPC security groups, logging, monitoring, and encryption.

Perform security reviews of cloud infrastructure to identify risks, misconfigurations, and improvement opportunities.

Review and remediate findings from AWS Control Tower, AWS Security Hub, GuardDuty, and related cloud security services.

Conduct periodic security posture reviews across customer environments.

Support AWS Well-Architected Framework security pillar reviews and remediation activities.

Support network security infrastructure including Palo Alto and Fortinet/Fortigate firewalls.

Assist with vulnerability remediation, patching, and security hardening activities.

Work with security monitoring tools and logging platforms to detect and investigate threats.

Participate in incident response and root cause analysis activities.

Assist with remediation of security and compliance findings.

Support audit preparation and evidence collection for security and compliance audits.

Maintain and organize security evidence repositories used for compliance audits.

Collaborate with cloud engineering teams to improve security architecture and automation.

Assist with maintaining security documentation, policies, and operational procedures.

Is this role for you?

Qualifications:

2+ years of experience supporting cloud or hybrid environments.

Experience with AWS security best practices and IAM.

Experience reviewing cloud security posture using services such as AWS Security Hub, GuardDuty, Control Tower, or similar tools.

Experience with network security concepts (VPC, VPN, firewalls, routing).

Experience managing or supporting Palo Alto or Fortinet/Fortigate firewalls.

Experience with Linux and Windows server operating systems.

Experience with monitoring or security tools.

Experience supporting production environments in a customer-facing role.

Experience working with operational platforms such as ServiceNow or Jira.

Familiarity with monitoring platforms such as Datadog.

Experience with documentation platforms such as ITGlue or Confluence.

Fluent in spoken English.

Desirable:

AWS Security Specialty certification.

Security+, CISSP, or similar certifications.

Experience with Infrastructure as Code (Terraform or CloudFormation).

Experience with SIEM or security monitoring platforms.

Experience working in Managed Service Provider (MSP) environments.

Experience with Trend Micro security solutions.

Experience with backup platforms such as Druva.

Familiarity with incident alerting platforms such as OpsGenie or PagerDuty.

Experience with cloud governance platforms such as MontyCloud.

Experience supporting AWS GovCloud environments.

Experience working in regulated environments such as healthcare, finance, or government sector.

In addition to the perks of working with an awesome team, CloudHesive offers competitive compensation, comprehensive benefits, training on cutting-edge technologies and partners (AWS), a flexible work schedule, responsible time off, standing desks, a kitchen filled with employee-selected snacks, and much more! If you think you’d be a great fit, we’d like to learn more about you!