Security Engineer - Cloud Security Controls

PNC is a leading financial services company that values its employees as its greatest asset. They are seeking a Security Engineer for their Cloud Security team to build and deploy security controls for public cloud workloads, ensuring compliance with regulatory standards. The role involves collaborating with various teams to automate security processes and mentor junior team members.

Responsibilities:

• Build and test security controls for Azure resources and AWS services
• Validate security control effectiveness and promote controls to production workloads
• Work within agile team and proactively participate in planning sessions
• Engineer and Configure utilizing CSPM tools to effectively analyze and assess cloud workloads for compliance in a CI/CD environment
• Continuous learning environment – Our team does not stand still, a growth mindset that is continuously seeking new and better ways to solve security challenges is a must
• Assess, implement, automate, and document security solutions and processes for Microsoft Azure and AWS
• Provide analysis of workloads to ensure alignment with operational security requirements in order to go to production
• Work closely with Cloud Security Product Owner to refine backlog tickets and define priority and sizing
• Automate and orchestrate the process of Cloud software deployment (CI/CD) to integrate enterprise security standards, policies, configurations, and architectures, for applications, platforms, and infrastructure
• Assist DevOps team members with the development and operationalization of security
• Ensure the security posture of applications seeking deployment into Production

Requirements:

• 5+ years of industry-relevant experience
• University / college degree or a comparable combination of education, job specific certification(s), and experience (including military service)
• Ability to build and test security controls for Azure resources and AWS services
• Ability to validate security control effectiveness and promote controls to production workloads
• Experience working within an agile team and proactively participating in planning sessions
• Ability to engineer and configure utilizing CSPM tools to effectively analyze and assess cloud workloads for compliance in a CI/CD environment
• Ability to assess, implement, automate, and document security solutions and processes for Microsoft Azure and AWS
• Ability to provide analysis of workloads to ensure alignment with operational security requirements in order to go to production
• Ability to work closely with Cloud Security Product Owner to refine backlog tickets and define priority and sizing
• Ability to automate and orchestrate the process of Cloud software deployment (CI/CD) to integrate enterprise security standards, policies, configurations, and architectures, for applications, platforms, and infrastructure
• Ability to assist DevOps team members with the development and operationalization of security
• Ability to ensure the security posture of applications seeking deployment into Production
• Strong ability to collaborate, problem solve, and actively build trust with partners and stakeholders
• Strong written and verbal communications skills
• Deep experience with AWS and/or Azure cloud services in an Enterprise environment
• Thorough understanding of Cloud security best practices
• Experience performing security gap analysis on Cloud Services or Cloud Infrastructure
• Experience in implementing security controls for public cloud workloads in Azure and AWS
• Experience creating innovative security solutions that balance security with all other corporate priorities
• Proficient in one or more scripting languages such as Python, Powershell, Bash, etc
• Expertise with Git, including branching workflows
• Experience with testing security controls to ensure the effectiveness of the control
• Process and detail oriented
• Demonstrated project leadership, helping guide the direction of large team initiatives
• Ability to think outside the box when considering options to address security controls at scale and across multiple cloud service providers
• Expertise in SQL or SQL-type query languages
• Azure Fundamentals - AZ-900 certification
• Azure Security Engineer Associate - AZ-500 certification
• AWS Cloud Security Engineer certification