Sr. Cloud Security Engineer

Company: Effectual
Location: Hoboken
Posted on: February 19, 2021

Job Description:

The resource will be responsible for engineering security into CHS infrastructure and supported applications. They will be a member of the CHS Security Operations Center (SOC), and work under the guidance of the CHS Security Coordinator. The Senior Cloud Security Engineer will work closely with the Design, Security, and Operation Team for cloud design and is responsible for engineering the deployment of a secure, complex AWS cloud environments and infrastructure. The daily responsibilities include the automation of vulnerability remediation, developing AI/ML solutions for network and host intrusion detections systems (NIDS/HIDS), and developing configuration compliance solutions leveraging Ansible, PowerShell DSC combined with AWS Systems Manager.
Essential Security Vulnerability Management Qualifications:

• Successful candidate will understand the Risk Management Framework (RMF) and the NIST 800-53 RMF Security Control Catalog
• Strong analytical, task management, time management, and communication skills necessary for handling Vulnerability Management initiatives, tasks and deadlines impacting the agency's environment. Ability to research, analyze, correlate and present agency vulnerability data from a variety of agency-hosted tools including the analysis of multilevel security risks and problems and compensating controls to the agency's IT management and staff.
• Ability to collaborate proactively with developers, system owners, system administrators and IT management (both internal and external) in researching vulnerabilities, communicating the details to these partners and IT management, developing action plans, following up and closing out all vulnerabilities by the required agency target or mandated deadlines.
• Demonstrate the ability to design, configure, engineer, integrate, and implement system security solutions that will provide configuration management for multiple operating systems and applications. Work with IT staff to be creative when it becomes necessary to tailor configurations and create/document baseline or custom configurations.
• Working knowledge of NIDS & HIDS solutions in AWS
• Experience with AWS security services to include AWS Security Center, AWS GuardDuty, AWS Config, CloudTrail, CloudWatch, CloudWatch Events, AWS Inspector, Lambda, and AWS Systems Manager
• Mentor team members, junior and senior, in state-of-the-art incident response practices
  Basic Qualifications:
  
  • Minimum Years of Experience: Must have minimum of 4 years of experience in Cloud / AWS Security Engineering/Development with 10+ years in overall Security engineering
  • Minimum Education: B.S. Degree in related discipline or equivalent, additional experienceAWS Professional Certification or multiple associate level certifications
    • US Citizenship
      Initial Deliverables:---Deliver an SOC design document within 3-5 months that considers:
      • Technology
      • Evaluate/familiarize existing in-scope infrastructure - IaaS/SaaS/PaaS/On-Prem/Legacy
      • Evaluate existing non-AWS security tools and technology in place
      • Evaluate and POC new (if needed) and/or existing AWS security products in use
      • POC new SOC technologies (SOAR and/or SIEM) to augment existing AWS tools if needed
      • Define threat intelligence feeds and/or partnerships
      • Propose new security tools/technologies to support a SOC buildout and processes (could be part of SOC design doc)
      • Evaluate existing Incident Response process and procedures
      • Evaluate existing CSIRT processes and procedures
      • Evaluate/familiarize existing SecDevOps process and procedures and AWS management concept in general
      • Propose improvements of CSIRT processes to support a SOC buildout (could be part of SOC design doc)
      • Understand existing security team structure

Keywords: Effectual, Hoboken , Sr. Cloud Security Engineer, Engineering , Hoboken, New Jersey