云安全工程师
Cloud Security Engineer
职位名称：云安全工程师
地点：远程 / 印度
经验：5–8 年
雇佣类型：全职
通知期：可立即入职或最多15天
岗位简介
我们正在寻找一名有技能的云安全工程师，以加强我们多云基础设施的安全性。理想的候选人将负责云安全运营、安全监控、事件响应、配置审查、自动化以及在云平台、终端设备、邮件系统和人工智能驱动的工作负载中实施安全最佳实践。
此职位需要具备云安全技术、身份管理、SIEM、CSPM、自动化和云原生安全服务的实际操作经验。
主要职责
云安全运营
- 监控、分析并响应 AWS、Azure、GCP 或 OCI 环境中的安全事件。
- 调查云安全警报并进行威胁分析。
- 支持组织云安全态势的持续监控和改进。
安全发现与修复
- 分析与云基础设施、终端设备、邮件安全和监控平台相关的安全发现。
- 记录风险评估、严重程度分类、业务影响和修复建议。
- 在工单系统和报告平台中维护准确的安全发现信息。
警报调查与事件响应
- 对来自云安全和监控工具的安全警报进行优先级排序、调查和分类。
- 保持详细的调查记录，包括所执行的分析、缓解措施、升级情况和最终解决方案。
- 协助安全事件调查、根本原因分析和事件后报告。
云安全态势管理
- 在云环境中进行安全配置评估。
- 审查 IAM 配置并评估云安全态势管理（CSPM）的发现结果。
- 建议改进措施以加强云安全控制和合规性。
AI 安全
- 保护部署在云环境中的 AI/ML 工作负载，包括训练流程、推理服务和数据存储。
- 监控 AI 服务和第三方 AI API 的滥用、异常和未经授权的访问。
- 与工程团队合作，实现安全的 AI 部署实践。
- 支持负责任的 AI 采用治理和政策制定。
安全自动化
- 设计、开发和维护安全自动化工作流和脚本。
- 开发自动化工具以提高安全流程的效率和一致性。
查看英文原文
Job Title: Cloud Security Engineer
Location: Remote / India
Experience: 5–8 Years
Employment Type: Full-Time
Notice Period: Immediate Joiners or Up to 15 Days
Role Summary
We are seeking a skilled Cloud Security Engineer to strengthen the security of our multi-cloud infrastructure. The ideal candidate will be responsible for cloud security operations, security monitoring, incident response, configuration reviews, automation, and implementing security best practices across cloud platforms, endpoints, email systems, and AI-enabled workloads.
This role requires hands-on experience with cloud security technologies, identity management, SIEM, CSPM, automation, and cloud-native security services.
Key Responsibilities
Cloud Security Operations
- Monitor, analyze, and respond to security events across AWS, Azure, GCP, or OCI environments.
- Investigate cloud security alerts and perform threat analysis.
- Support continuous monitoring and improvement of the organization's cloud security posture.
Security Findings & Remediation
- Analyze security findings related to cloud infrastructure, endpoints, email security, and monitoring platforms.
- Document risk assessments, severity classifications, business impact, and remediation recommendations.
- Maintain accurate security findings within ticketing systems and reporting platforms.
Alert Investigation & Incident Response
- Triage, investigate, and classify security alerts from cloud security and monitoring tools.
- Maintain detailed investigation records, including analysis performed, mitigation actions, escalations, and final resolution.
- Assist in security incident investigations, root cause analysis, and post-incident reporting.
Cloud Security Posture Management
- Conduct secure configuration assessments across cloud environments.
- Review IAM configurations and evaluate Cloud Security Posture Management (CSPM) findings.
- Recommend improvements to strengthen cloud security controls and compliance.
AI Security
- Secure AI/ML workloads deployed in cloud environments, including training pipelines, inference services, and data storage.
- Monitor AI services and third-party AI APIs for misuse, anomalies, and unauthorized access.
- Collaborate with engineering teams to implement secure AI deployment practices.
- Support governance and policy development for responsible AI adoption.
Security Automation
- Design, develop, and maintain security automation workflows and scripts.
- Develop automation using Python and Infrastructure as Code (IaC) tools such as Terraform.
- Document automation processes to support operational teams.
Reporting & Metrics
- Prepare operational reports covering:
- Security alert trends
- Remediation progress
- Cloud security posture improvements
- Tool optimization and tuning
- Present security status updates and findings to internal stakeholders.
Required Skills & Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field.
- 5–8 years of experience in Cloud Security, Security Operations, or Cloud Infrastructure Security.
- Hands-on experience securing AWS, Microsoft Azure, Google Cloud Platform (GCP), or Oracle Cloud Infrastructure (OCI).
- Strong understanding of Identity & Access Management (IAM), cloud networking, and cloud-native security services.
- Experience with Cloud Security Posture Management (CSPM) tools and Endpoint Detection & Response (EDR) platforms such as CrowdStrike.
- Experience working with SIEM platforms and incident response processes.
- Knowledge of identity-aware access solutions such as Teleport or similar secure access platforms.
- Proficiency in Python scripting.
- Understanding of AI/ML workload security, API security, and cloud data protection.
Preferred Qualifications
- Industry certifications such as AWS Certified Security – Specialty, Microsoft Azure Security Engineer, CCSP, or CISSP.
- Experience with DevSecOps, SOAR platforms, and security automation.
- Knowledge of compliance frameworks including ISO 27001, SOC 2, and similar standards.
- Familiarity with email security technologies such as SPF, DKIM, and DMARC.
Originally posted on Himalayas