Cloud Security Engineer

🕒 il y a 28 jours

🏈 Ohio – Distant

🏈 Ohio – Remote

💵 $115 000 - $150 000 / an

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 4%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Gifthealth

Site WebLinkedInTous les Emplois

501 - 1000 employés

Fondée en 2020

🏥 Santé

📦 Logistique

💼 Conseil

💰 €40 000 000 Private Equity Round - GiftHealth en 2023-04

Healthcare • Logistics • Consulting

Gifthealth est une entreprise technologique axée sur l'accès des patients et la gestion des ordonnances, qui relie les patients, les prescripteurs, les pharmacies et les fabricants pharmaceutiques à travers une plateforme numérique unifiée. Elle simplifie l'inscription, la vérification électronique des avantages, l'autorisation préalable électronique et le soutien en matière de paiement/accessibilité tout en gérant la délivrance des ordonnances en pharmacie et les services de soutien aux patients. La plateforme fournit également aux fabricants des données exploitables et des insights sur les parcours des patients et la performance des marques, favorisant un accès plus rapide et plus fiable aux médicaments.

Description

• Develop and maintain security standards and reference architectures for cloud environments • Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes • Evaluate proposed architectures for security risks and recommend appropriate controls • Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services • Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake • Identify insecure cloud configurations and excessive permissions • Assess cloud environments against security standards and benchmarks • Prioritize and coordinate remediation of cloud security findings • Establish least-privilege access models and controls for administrative and privileged cloud access • Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management • Implement cloud security guardrails with engineering teams • Ensure cloud logging and security telemetry support monitoring • Develop or assist with detections for suspicious cloud activity • Partner with Security Operations to investigate cloud security events • Embed security requirements into Infrastructure-as-Code • Develop automated checks, preventative controls, reusable secure modules, and templates • Automate security processes using APIs, scripts, and cloud-native services • Support vulnerability management across cloud infrastructure and workloads • Coordinate vulnerability remediation with infrastructure and engineering teams • Develop cloud security standards and technical requirements • Map cloud controls to security and compliance requirements • Provide technical evidence for audits and assessments • Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications • Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams • Report to the Director of Security

🎯 Exigences

• 3+ years of experience in cloud engineering, cloud security, infrastructure engineering, DevOps, security engineering, or a related field • Hands-on experience securing environments within at least one major public cloud platform • Strong understanding of cloud IAM, networking, encryption, secrets management, logging and monitoring, compute and storage security, vulnerability management, and cloud-native security services • Ability to secure workloads across a hybrid environment spanning AWS and externally managed platforms such as Heroku and Snowflake • Experience scripting or automating infrastructure and security activities • Understanding of least privilege and cloud-native identity models • Ability to evaluate cloud architectures and communicate security requirements clearly to technical teams • Must be able to work at a computer for extended periods • Must be able to communicate effectively, verbally and in writing • Must be able to handle and access sensitive cloud infrastructure and security data in compliance with organizational requirements • Must be able to respond to critical cloud security incidents outside standard working hours when required • Relevant AWS, cloud security, Kubernetes, or security certifications are a plus, but not required • Preferred: strong AWS security experience, including multi-account cloud environments • Preferred: experience with Kubernetes, containers, or serverless technologies • Preferred: experience with CSPM or CNAPP platforms and familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks • Preferred: familiarity with Site-to-Site and client VPN architectures • Preferred: experience with column-level masking, row-level security, or PHI field-level governance in Snowflake or BigQuery • Preferred: experience with Terraform or CloudFormation and preventative cloud guardrails • Preferred: experience working within regulated environments

🏖️ Avantages

• Full-time employment • Standard business hours • Flexibility for cloud security incident response or urgent remediation of high-risk findings • Equal Opportunity Employer committed to an inclusive environment