Cloud Security Engineer

Responsibilities

Be responsible for designing, developing and operating cloud security technical solutions in accordance with relevant cloud security policies and standards, as well as cloud architecture standards and guidelines.

Undertake security audits of the company's cloud environment, covering network, configuration, permissions, data, etc., identify security risks and promote their handling.

Take charge of daily vulnerability management for cloud security.

Be responsible for the construction of the container security system.

Develop Key Rotation strategies and promote their implementation.

Monitor the security status of cloud infrastructure, and cooperate with the technical team to respond to and investigate alerts emphasized by the SOC.

Requirements

Familiar with various AWS services, including IAM, VPC, Security Group, NACL, LB, KMS, Secret Manager, etc.

Proficient in using tools such as AWS Security Hub, GuardDuty, Inspector, Config, and IAM Access Analyzer to identify issues.

Familiar with EKS security, such as Pod security policies.

Skilled in using and operating container security tools like Falco and their rules.

Familiar with cloud security technologies such as CSPM, CIEM, and CNAPP.

Have experience in conducting cloud infrastructure risk assessments and vulnerability analysis.

Have participated in emergency response to cloud security incidents.

Possess excellent analytical thinking ability and problem - solving skills.

Have effective time management and organizational abilities.