Cloud Security Engineer 4

Job Title: Cloud Security Engineer 4Pay Rate: $75/HRDuration: 12 monthsLocation: Charlotte, NC, Phoenix, AZ, Dallas, TX We are looking for Cloud Security Engineer 4Job Description:Client is seeking an experienced Lead Information Security Engineer (Information security Engineer 4 - Contingent) to join client’s Cloud Workload Lifecycle Security (CWLS) team, within the Cybersecurity – Vulnerability & Patch Management organization.Be a part of one of the core teams working on Client’s digital transformation; join client’s dynamic, diverse, fast-paced team environment where client secure and reduce risk for client’s Enterprise cloud migration.The Information security Engineer 4 – Contingent – Posture Management Engineer will support the SaaS Security Posture Management (SSPM) tool, with specific focus on Posture Management module.This area of client’s team specializes in engineering and support for Public Cloud & SaaS applications such as Salesforce, ServiceNow with emphasis on mis-configuration detection and configuration drift monitoring and the associated integrations to partner systems for logging, delivery of Findings, etc.Key Responsibilities:Leveraging your deep expertise with automation to “semi-automate” Policy as Code development, leveraged to monitor for SaaS application misconfiguration/config. driftAct as the subject matter expert (SME) for SSPM capabilities, roadmap features, and best practices specificEnable, configure and tune SSPM detection policiesAbility to efficiently transform security requirements/parameters into policies for SSPMStrong collaboration with direct teammates, vendors and partners, ensuring the success of policy development automationLead technical/engineering requirement gathering discussions and effectively design/develop complex solutionsTroubleshoot and resolve support escalation cases related to SSPMContribute to internal code repositories to continuously improve overall code quality for the teamDevelop and maintain high-quality documentationTrain team members on utilizing the PaC semi-automation tooling/approach you establish for client’s policy development practiceBe a motivated self-starter, quick to adapt and stay focused on delivering results in a fast-paced environment with aggressive deadlinesWork effectively with a virtual Team consisting of members across various locations in the U.S. and IndiaRequired Skills:5 plus years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education4 plus years of Intermediate to Advanced experience with Python and automation2 plus years of practical experience and strong understanding of Azure & Google public cloud – platforms, services, configurations, workloads & hardening practices1 plus year of experience with SaaS Security Posture Management tools like Obsidian security, AppOmniExperience with extracting, transforming, and loading data via REST API endpointsAdvanced experience with Python programming/automationFamiliarity with CI/CD tools (GitHub Actions, GitLab CI, Jenkins, Azure DevOps)Strong verbal and written communication skillsProven ability to work independently, as well as having strong interpersonal skills to work effectively within a Team and with partnersStrong analytical skills, proven critical thinking capabilities and ability to solve complex problems with minimal direct oversightIntermediate to advanced experience working with Microsoft Office products (e.g. Word, Excel, PowerPoint, Visio, Outlook, MS Teams, SharePoint)Ability to handle multiple, high priority deliverables concurrentlyAbility to communicate confidentially, professionally, and effectively, in both written and verbal formats, with stakeholders and partners1 plus year experience working on teams practicing Agile Scrum or Kanban methodologiesDesired Skills:1 plus year of deep Obsidian Security experience, in either an engineering or support roleKnowledge and understanding of DevSecOps and deployment automation to cloud environmentsExpertise and experience with API driven policy automationExpertise and experience with Infrastructure as Code (IaC) and/or Policy as Code (PaC) concepts/toolsExpertise with automated testingIntermediate to advanced experience with Kubernetes, preferably AKS/GKEFamiliarity with various cloud security and related risk frameworks (Cloud Security Alliance (CSA), CIS, NIST, etc.)Experience with change and incident management practices in large enterprisesSecurity certifications such as Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), or equivalent, CISA, CISM, CISSP, CRISC, CCSKMicrosoft Azure and/or Google Cloud Certifications