Cloud Security Engineer

Apolis is seeking a Cloud Security Engineer to advise customers on designing and implementing secure cloud systems. The role focuses on assessing cloud cyber risks, developing security controls and policies, advising on secure cloud-native architectures, and creating technical security content.

Responsibilities:

• Advise customers on best practices in design and implementation of secure cloud systems
• Perform reviews of multiple cloud platforms and services to assess cyber risks around security risks such as data leakage and unauthorized access, and design controls to mitigate those risks
• Design, develop, and implement security requirements into cloud-native architectures that will allow business requirements to be met with appropriate security controls present
• Design and develop cloud-specific security policies, standards, and procedures
• Provide technical design and architecture advice to customer teams on how to securely develop and build cloud-ready applications
• Effectively articulate complex cloud topics and discuss business impacts with senior customers, positively influencing outcomes
• Develop high-quality technical content such as security automation tools, reference security architectures, and white papers to help our consultants, partners, and customers build on the work you deliver

Requirements:

• 5+ years of experience in Cloud Security Architecture and/or Engineering
• 5+ years of experience in professional services consultancy, commercial cyber security, information security or related industries
• Deep understanding of different cloud architecture models, hosting and deployment models
• In-depth knowledge of the security and compliance capabilities of AWS cloud platform
• Experience working on integrating cloud services with common and industry standard cloud-native/cloud-friendly security mechanisms (protect, detect, breach response, and recovery)
• Broad awareness of security engineering concepts and practices across all phases of the system development lifecycle
• Experience with securing containerized technologies (examples – Docker, Kubernetes, etc.)
• Deep technical knowledge of cyber security risks, threats, and defenses to effectively assess the security implications and requirements for the introduction of new cloud technologies
• Previous exposure to hybrid IT situations, including combining on-premise IT capabilities with Cloud IT capabilities
• The ability to communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms for these stakeholders