Key skills

Cloud Security AWSCloud Security AzureCloud Security GCPSecurity Information and Event Management (SIEM)Security Orchestration, Automation and Response (SOAR)Vulnerability ScanningData Loss Prevention (DLP)Firewall SecurityIntrusion Detection and Prevention (IDS/IPS)ScriptingInfrastructure as Code (IaC)Vulnerability ManagementContainer-Based ArchitecturesSecurity Frameworks SOC 1Security Frameworks SOC 2Security Frameworks HITRUSTSecurity Frameworks ISOAWSAzureGCPSAPAgileLeadershipCommunicationPresentation SkillsCloud SecurityFirewall

About this role

Reltio is an SAP Company providing a cloud-native Context Intelligence Platform that unifies and governs enterprise data. The Staff Cloud Security Engineer will help lead information security functions, define global enterprise security architecture, and develop security strategies for enterprise applications. The role partners with technology and business teams to implement secure solutions, assess risks, and protect intellectual property and customer data.

Responsibilities:

Serve as a security subject matter expert by providing guidance on industry best practices and defense in-depth strategies for the security architecture
Recommend, test, design, deploy and optimize threat detection/prevention solutions
Develop new and novel defense techniques to identify and stop advanced adversary tactics and techniques
Work with the respective functional teams and stakeholders to resolve security related configuration issues
Perform technical risk assessments of new technology and ensure the solution meets secure architecture designs
Assess and measure risk impact of a security deficiency and communicate the risk or risks to stakeholders
Proactively identify issues and recommend configuration settings or supporting solutions to mitigate security deficiencies
Investigate security events and incidents leveraging security tools

Requirements:

8+ years of experience in information security
Strong knowledge of cloud security (AWS, Azure, GCP)
Strong knowledge of industry standard security technology: anti-virus & anti-malware, SIEM, SOAR, vulnerability scanning, DLP, firewall, IDS/IPS, etc
Strong experience with scripting and infrastructure-as-code (IaC)
Strong understanding of vulnerabilities and common attack vectors
Experience with industry frameworks such as SOC1/SOC2, HITRUST, ISO
Solid understanding of audit methodologies and processes
Experience working with virtual teams in a global environment
Strong communication and presentation skills
Adaptable and agile
Good interpersonal, partnership and leadership skills (without direct authority of others
Experience developing and operationalizing a vulnerability management program
Experience working with container-based architectures
Security and Cloud certifications