Cloud Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

OneStream Software

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💸 Finance

🏢 Enterprise

💰 Series B on 2021-04

Software • Finance • Enterprise

OneStream Software is a financial software solutions provider that specializes in streamlining financial consolidation, reporting, and planning processes for businesses. Their platform is designed to enhance organizational efficiency by integrating various financial functions into a single, easily manageable system, thereby enabling businesses to make informed decisions based on real-time financial data.

📋 Description

• Design, implement, and continuously improve security controls and configuration baselines across Microsoft Azure and Microsoft 365. • Configure, administer, and optimize Microsoft Defender for Cloud, Microsoft Defender for Endpoint, Microsoft Defender for Cloud Apps, and related technologies. • Conduct security assessments of cloud resources, applications, Azure Kubernetes Service, and containerized workloads. • Identify vulnerabilities, misconfigurations, excessive permissions, and other security risks. • Prioritize vulnerability findings, coordinate remediation efforts, and validate corrective actions. • Configure and enhance cloud security monitoring, threat detection, investigation, response, and automation using Microsoft Sentinel, Kusto Query Language, and related technologies. • Collaborate with Cloud, Compliance, and other internal teams to ensure secure cloud service design, deployment, and maintenance. • Respond to customer security inquiries, assessments, and questionnaires. • Develop and maintain technical documentation, procedures, dashboards, alerts, and reporting. • Support internal and external audits by gathering evidence, validating controls, and demonstrating compliance. • Support incident response by investigating suspicious, anomalous, or unauthorized cloud activity and participating in security investigations.

🎯 Requirements

• BS/BA in Cybersecurity, Computer Science, Engineering, or a technology-related field, or equivalent work experience • 3+ years of experience securing cloud-based infrastructure, services, and technologies • Experience identifying, analyzing, and mitigating security risks within cloud environments • Experience securing Microsoft Azure through secure configuration, least-privilege access, data protection, threat detection and response, and security hardening • Experience deploying, administering, and using Microsoft Defender, SIEM, CASB, vulnerability management, and related security technologies • Working knowledge of Azure Log Analytics, Kusto Query Language, PowerShell, Bash, and REST APIs • Working knowledge of Microsoft Entra ID, RBAC, authentication, authorization, and least-privilege access • Working knowledge of Windows and Linux operating systems • Familiarity with incident response, incident management, and change management processes • Preferred: experience with a CSP, MSP, SaaS provider, or similarly regulated cloud environment • Preferred: 5+ years of experience with Microsoft Azure, AKS, and containerized workloads • Preferred: knowledge of NIST 800-53, FedRAMP, SOC 1, SOC 2, ISO 27001, or similar standards • Preferred: knowledge of IAM technologies and protocols including Okta, SAML, OAuth, and OIDC • Preferred: experience with IaC technologies including ARM, Bicep, Terraform, and Azure DevOps pipelines • Preferred: working knowledge of network security, TCP/IP, DNS, TLS, and firewalls • Preferred: familiarity with Agile, Scrum, and DevSecOps • Preferred: relevant cybersecurity certifications such as AZ-500, AZ-104, SC-200, SC-300, SC-100, Security+, or Cloud+ • Strong analytical and problem-solving skills • Excellent written, verbal, and presentation communication skills • Ability to communicate technical information to technical and non-technical stakeholders • Demonstrated initiative, accountability, and attention to detail • Effective prioritization and organizational skills • Adaptability to changing technologies, priorities, and business needs • Commitment to continuous learning and professional development • Legally authorized to work for any company in the United States without sponsorship

🏖️ Benefits

• Vision • Medical • Life • Dental • 401K • Additional variable compensation may apply • Excellent Medical Plan • Dental & Vision Insurance • Life Insurance • Short & Long Term Disability • Vacation Time • Paid Holidays • Professional Development • Retirement Plan • Multiple training opportunities • Variety of project work • Strong culture and camaraderie • Transparency around corporate structure, salary, and benefits