Cloud Security Engineer - Vulnerability

Top 35 skills below:

Defines manages and measures security configuration baselines in line with internal policies/standards and CIS benchmarks.

Provide guidance and recommendation to engineers and developers on how to correct baseline configuration related security vulnerabilities.

Manages Cloud Security tools. (Sonrai Aqua Tanium AppOmni etc.)

Experience with security configuration checklists (e.g. CIS Benchmarks and CSA security guidance)

Experience with programming or creating custom baseline configurations within scanning tool.

Experience using a threat and vulnerability management tool. EG. Nucleus Kenna Brinqa

AppOmni Deployment and scanning

Kubernetes Scanning and remediation.

IOT/OT scanning and remediation.

Duties:
Cloud Baseline Control Reviews:
Defines and manages cloud specific technical security policies (CSA security guidance).
Defines manages and measures security configuration baselines in line with internal policies/standards and CIS benchmarks
Provide security documentation to developers software engineers and technical personnel when necessary
Provide guidance and recommendation to engineers and developers on how to correct baseline configuration related security vulnerabilities
Cloud Security Engineering:
Manages Cloud Security tools. (Sonrai Aqua AppOmni)
Populates data visualization tool (such as Tableau) for reporting vulnerability metrics by system and owner
Makes recommendations on toolset modifications and improvements improvements on development processes and production cloud security support
Evangelizes cloud security program fundamentals tools processes
Perform scans via the Vulnerability Management Platform (scheduled and adhoc).

Skills:
Experience in cloud security tools (Sonrai Aqua AppOmni)
Experience with security configuration checklists (e.g. CIS Benchmarks and CSA security guidance)
Experience with Tanium programming or creating custom baseline configurations within Tanium
System administration and scripting experience
Outstanding communication analytical skills and ability to function in a globally diverse work environment
Proficiency in performing cloud security assessments and in defining treatment strategies

Education and Experience:
Bachelors degree in Computer Science or related field or equivalent experience/certification
Cloud Security: 2 years (Required)
2 years working as a Security Engineer or Cloud Engineer
Ability to analyze complex problems and implement solutions and/or workarounds
Experience with security configuration checklists (e.g. CIS Benchmarks and CSA security guidance)
Familiarity with NIST Special Publications (e.g.CSF)
Familiarity with PCI DSS Compliance standards