Rocket Software Senior Cloud Security Engineer - Boise, Idaho
Job Description Summary: Senior cloud security engineer with 5-7 years experience securing infrastructure and services in AWS and Azure clouds.
Job Overview: As a senior cybersecurity engineer focused on cloud security with Rocket Software, you are part of a global, fast-paced IT organization with a primary mission to provide world-class service to software development labs and internal departments ensuring our employees have secure access and communication systems to perform at the highest level. The successful candidate will be a highly technical individual primarily responsible for the security of company data and workloads in public cloud infrastructure. This role will also provide guidance, advice, data, and reports on their activities, results, and remediation to address cyber risk in the cloud. Additional responsibilities include monitoring, analyzing, and resolving security incidents in a proactive way and assisting to support the security technologies that help to protect the company. As this is an opportunity to help build a world-class security program in a dynamic work environment, the ideal candidate will be comfortable in a fast-changing and fluid environment.
Essential Duties and Responsibilities:
- Deploy, manage, and maintain the enterprise cloud security technology stack
- Utilize a wide range of security capabilities including both native cloud tooling and 3rd party platforms such as CNAPP and CSPM solutions, network detection and response (NDR), vulnerability assessment and discovery, identity and access management (IAM), data protection solutions, key management (KMS), and event logging systems in order to build a layered defense approach to cloud environments
- Develop playbooks for incident response and best practices focused on cloud architectures and technologies
- In coordination with the CISO, create a companywide program for secure cloud services
- Coordinate with external security partners, such as managed detection and response (MDR) providers on critical security workflows and playbooks
- Function as a key technical member of the cyber response team supporting the investigation and remediation of cyber events and incidents, red team/blue team/purple team and enterprise tabletop exercises
- Analyze, assess and test for cyber threats across enterprise clouds
- Protect Rocket customer and intellectual property (IP) data
- Develop and present reports that detail approach, analysis techniques, results, and recommended remediations
Required Qualifications:
- At least 7 years of experience securing public cloud infrastructure in AWS and Azure
- Hands-on experience with tools such as Palo Alto Prisma, Wiz, Orca or Lacework
- Experience working with secure cloud networking, compute and data workloads, and serverless computing solutions
- Experience securing CI/CD cloud delivery pipelines
- Knowledge of secure cloud architecture and best practices such as AWS’s Well-Architected Framework
- Knowledge of cloud incident response and experience with tabletop exercise and red/blue/purple team engagements is highly desirable
- Experience with GCP and IBM clouds is desirable
- Experience with scripting languages is a plus
- Experience providing user guidance, documentation, and consultation
- Excellent troubleshooting skills, self-motivated, results-driven, and well-organized
- Experience with explosive growth and variable requirements
- Experience with change and incident management processes
- Certifications such as AWS Certified Security Specialty or Azure Security Engineer Associate are desirable