Dice is seeking a Cloud Information Security Engineer for a 6-month contract engagement to support the security of cloud computing environments. The role involves implementing and maintaining security controls, collaborating with various teams, and assisting with security assessments and audits.
Responsibilities:
- Support the security of public and hybrid cloud environments (e.g., AWS, Azure) by implementing and maintaining security controls and configurations
- Assist in securing cloud workloads and services in alignment with corporate security policies, risk requirements, and compliance frameworks
- Configure, operate, and provide Tier 2 support for cloud-focused security tools, including but not limited to:
- O Cloud security posture management (CSPM) and CNAPP tools
- O Web Application Firewalls (WAF)
- O Data Loss Prevention (DLP)
- O Email security gateways
- O Identity and Access Management (IAM)
- Perform security assessments and assist in remediation of identified risks and misconfigurations within cloud environments
- Collaborate with Cloud, Infrastructure, Application, and Security Operations teams to improve overall cloud security posture
- Support investigation of escalated security events related to cloud services, including assisting with containment, remediation, and documentation
- Assist with operationalizing and improving existing security tools through tuning, feature enablement, and upgrades
- Contribute to documentation, standards, procedures, and knowledge transfer for cloud security processes and tooling
- Assist with external audits, penetration tests, and vulnerability assessments as they relate to cloud environments
Requirements:
- 3-5 years of experience in one or more of the following areas: Cloud Information Security, Information Security Engineering, Cloud or Infrastructure Engineering with a security focus
- Hands-on experience with at least one major cloud platform (AWS and/or Azure)
- Working knowledge of cloud security concepts, including: Cloud networking and security controls, IAM (e.g., AWS IAM, Azure AD), Encryption technologies (TLS/SSL, VPNs, PKI basics)
- Exposure to cloud security tooling such as CSPM, CNAPP, WAF, DLP, or similar platforms
- Familiarity with at least one security framework or standard (e.g., NIST, CIS, MITRE ATT&CK, HIPAA, HITRUST)
- Strong troubleshooting skills and ability to follow established processes while working independently
- Good written and verbal communication skills, with the ability to document technical work clearly