Cloud Security Generalist

Role Overview

The Cloud Security Engineering group builds and delivers technology which enables shift left security integration through partnership and collaboration across Technology Risk and Information Security, as well as multiple Technology teams. Information Security Analysts working in the Kubernetes Security domain will design and develop Cloud infrastructure security requirements across Cloud platform, container, network, and storage tiers to deliver security capabilities for the enterprise Hybrid Multi Cloud Journey.

What You Will Do

Deliver Cloud Security Engineering functions intended to establish security code elements across private and public multi-cloud, provide security and engineering expertise and guidance to the Cloud Programs, and collaborate with enterprise architects and SMEs to deliver complete security architecture solutions.

Why It Might Be a Fit

To be successful, you and your team will work very closely with other Technology Risk and Information Security functions, as well as Cloud Security Governance, Cloud Security Operations, and many other Technology and non-Technology teams to identify, solution, and deliver security code elements.

Requirements

• 3 years of experience in Information Security roles
• 3+ years of Policy as Code experience
• Understanding of Cloud Fundamentals, including securing public cloud with data protection controls
• Experience performing validation and verification of configurations in a cloud environment
• Knowledge of security configuration management, container security, endpoint security and secrets management as they are applied to cloud applications
• Experience in defining resources configurations using Terraform or Helm
• Understanding of DevOps and DevSecOps principles
• Bachelor’s Degree in Computer Science, Software Engineering, Electric Computer Engineering (ECE) or equivalent information security degree
• Certified Kubernetes Administrator (CKA) or equivalent work experience
• Certified Kubernetes Security Specialist (CKS) preferred
• Other Information Security or Cloud Certifications preferred, such as CISSP, CISM, CCSP