Note: The job is a remote job and is open to candidates in USA. Apolis is seeking a Cloud Security Engineer to advise customers on designing and implementing secure cloud systems. The role focuses on assessing cloud cyber risks, developing security controls and policies, advising on secure cloud-native architectures, and creating technical security content.
Responsibilities
- Advise customers on best practices in design and implementation of secure cloud systems
- Perform reviews of multiple cloud platforms and services to assess cyber risks around security risks such as data leakage and unauthorized access, and design controls to mitigate those risks
- Design, develop, and implement security requirements into cloud-native architectures that will allow business requirements to be met with appropriate security controls present
- Design and develop cloud-specific security policies, standards, and procedures
- Provide technical design and architecture advice to customer teams on how to securely develop and build cloud-ready applications
- Effectively articulate complex cloud topics and discuss business impacts with senior customers, positively influencing outcomes
- Develop high-quality technical content such as security automation tools, reference security architectures, and white papers to help our consultants, partners, and customers build on the work you deliver
Skills
- 5+ years of experience in Cloud Security Architecture and/or Engineering
- 5+ years of experience in professional services consultancy, commercial cyber security, information security or related industries
- Deep understanding of different cloud architecture models, hosting and deployment models
- In-depth knowledge of the security and compliance capabilities of AWS cloud platform
- Experience working on integrating cloud services with common and industry standard cloud-native/cloud-friendly security mechanisms (protect, detect, breach response, and recovery)
- Broad awareness of security engineering concepts and practices across all phases of the system development lifecycle
- Experience with securing containerized technologies (examples – Docker, Kubernetes, etc.)
- Deep technical knowledge of cyber security risks, threats, and defenses to effectively assess the security implications and requirements for the introduction of new cloud technologies
- Previous exposure to hybrid IT situations, including combining on-premise IT capabilities with Cloud IT capabilities
- The ability to communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms for these stakeholders
Company Overview
Company H1B Sponsorship