出海雷达

云安全工程师

Cloud Security Engineer

开发工程限定地区(需当地身份)
公司SRM Technologies
薪资未公开
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间4 天前
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。

This is a remote position.
Job Description: Cloud Security Engineer – 5+yrs Role Summary We are looking for an experienced Cloud Security Engineer to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains. Key Responsibilities Security Findings & Remediation Documentation
· Analyze and document cloud, email, endpoint, and security monitoring findings.

  • Produce clear and actionable documentation covering:

o Risk assessment and severity classification o Impact analysis o Recommended remediation actions · Maintain findings documentation within ticketing systems, reports, or other designated

platforms. Alert Triage & Investigation
· Triage, investigate, and classify security alerts across cloud and security platforms.

  • Maintain complete and accurate investigation records, including:

o Analysis performed o Containment or mitigation actions (if applicable) o Escalation details o Final alert disposition AI Security in Cloud Environments · Secure AI/ML workloads deployed in cloud environments, including training pipelines, data

storage, and inference endpoints. · Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or

unauthorized access. · Collaborate with engineering teams to ensure secure deployment of AI services following

cloud security best practices. · Contribute to governance and policy development for responsible and secure AI usage in

the cloud. Configuration & Security Posture Assessment
· Conduct secure configuration reviews across cloud environments.

  • Perform IAM assessments and analyze CSPM findings.
  • Document posture assessment results and provide recommendations for security posture

improvements. · Support continuous monitoring and tuning of cloud security controls.

Security Automation & Tooling
· Design, develop, and maintain security automation scripts and workflow enhancements.

  • Create automation artifacts using scripting languages such as Python.
  • Provide sufficient documentation and usage notes to enable ongoing operation and

maintenance by internal teams. · Build cloud security infrastructure using infrastructure as code tools such as Terraform

Operational Metrics & Reporting · Prepare periodic cloud security operational reports, including:

o Alert volumes and trends o Remediation progress o Posture improvements o Tool tuning and optimization efforts · Present concise status updates to stakeholders as requested.

Incident Response Support
· Support investigation and response to security incidents impacting cloud environments.

  • Contribute to incident reports, investigation summaries, timelines, and technical analysis.
  • Assist with root-cause analysis and corrective action recommendations.

Required Skills & Qualifications
· Bachelor’s degree in computer science, Cybersecurity, or related field.

  • 5+ years of experience in Cloud Security / Security Operations.
  • Hands-on experience with AWS, Azure, GCP, or OCI security services.
  • Strong knowledge of IAM, network security, and cloud-native security controls.
  • Experience with CSPM tools and EDR platforms like Crowdstrike
  • Familiarity with SIEM tools and incident response processes.
  • Hands-on experience with identity-aware access solutions such as Teleport

(or similar platforms) for secure access to infrastructure and services.
· Proficiency in scripting languages like Python.

  • Foundational understanding of securing AI/ML workloads in cloud

environments (e.g., model access control, API security, data protection). Preferred Qualifications · Certifications such as AWS Security Specialty, Azure Security Engineer,

CCSP, or CISSP.
· Experience with automation, SOAR platforms, or DevSecOps practices.

  • Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).
  • Understanding of email security protocols (SPF, DKIM, DMARC).

Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

高级数据工程师

SRM TechnologiesUnited StatesFull Time7 天前
开发工程职能支持限定地区(需当地身份)

← 返回全部职位