高级云安全工程师 - AWS
Senior Cloud Security Engineer - AWS
Hello! 我们正在墨西哥寻找一名云安全工程师，要求重点关注AWS平台，负责设计、实施和管理安全的云解决方案。该职位需要在AWS服务、云架构和安全最佳实践方面有深厚的技术专长，同时具备领导能力，能够指导工程师团队并与跨职能利益相关者协作。虽然该职位专注于AWS，但具备Azure或其他云平台经验者优先。
主要职责：
- 主导安全、可扩展且具有弹性的AWS云解决方案的监督和治理。
- 带领跨职能工程师团队，实现AWS平台的云安全目标。
- 在AWS环境中定义并执行安全策略、标准和最佳实践。
- 与DevSecOps、安全和应用团队合作，将安全集成到CI/CD流程中。
- 对基于云的应用程序和基础设施进行威胁建模、风险评估和安全审查。
- 管理身份和访问管理（IAM），包括安全组、RBAC和条件访问策略。
- 监督使用原生和行业标准工具实现的安全监控、日志记录和警报。
- 跟踪AWS更新、新兴安全威胁和合规要求（例如ISO 27001、NIST、GDPR）。
- 指导其他工程师，并参与技术文档编写和知识分享。
所需资格：
- 5年以上安全经验，其中至少2年在云安全领域。
- 具有AWS的实际操作经验，包括IaaS、PaaS和SaaS。
- 对云安全原则、零信任架构和安全云设计模式有深入理解。
- 熟练掌握脚本编写和自动化（例如PowerShell、Terraform、Cloud Formation）。
- 具有AWS原生安全工具和服务的经验。
- 熟悉监管和合规框架（例如HIPAA、PCI-DSS、SOC 2）。
理想的认证或相关工作经验：
- AWS认证安全、高级网络或其他类似认证
- CISSP、CISM或其他相关安全认证
最初发布于Himalayas
查看英文原文
Hello! We are looking for a Cloud Security Engineer in Mexico,someone with a strong focus on the AWS platform to lead the design, implementation, and governance of secure cloud-based solutions. This role requires deep technical expertise in AWS services, cloud architecture, and security best practices, along with leadership capabilities to guide a team of engineers and collaborate with cross-functional stakeholders. While this role focuses on AWS, Azure or other cloud platforms is a plus.
Key Responsibilities:
- Lead the oversight and governance of secure, scalable, and resilient AWS cloud solutions.
- Lead a cross-function team of engineers to achieve cloud security objectives for the AWS platform
- Define and enforce security policies, standards, and best practices across AWS environments.
- Collaborate with DevSecOps, Security, and Application teams to integrate security into CI/CD pipelines.
- Conduct threat modeling, risk assessments, and security reviews for cloud-based applications and infrastructure.
- Manage identity and access management (IAM), including Security Groups, RBAC, and conditional access policies.
- Oversee the implementation of security monitoring, logging, and alerting using native and industry standard tools.
- Stay current with AWS updates, emerging security threats, and compliance requirements (e.g., ISO 27001, NIST, GDPR).
- Mentor and guide other engineers and contribute to technical documentation and knowledge sharing.
Required Qualifications:
- 5+ years of security experience, with at least 2 years in cloud security
- Hands-on experience withAWS, including IaaS, PaaS, and SaaS.
- Strong understanding of cloud security principles, zero trust architecture, and secure cloud design patterns.
- Proficiency inscripting and automation (e.g., PowerShell, Terraform, Cloud Formation).
- Experience with AWS-native security tools and services.
- Familiarity with regulatory and compliance frameworks (e.g., HIPAA, PCI-DSS, SOC 2).
Desirable Certifications or Relevant Work Experience
- AWS Certified Security, Advanced Networking or similar certifications
- CISSP, CISM, or other relevant security certifications
Originally posted on Himalayas