cloud security specialist

Customers Bank

<div>At Customers Bank, we believe in working hard, working smart, working together to deliver memorable customer experiences and having fun. Our vision, mission, and values guide us along our path to achieve excellence. Passion, attitude, creativity, integrity, alignment, and execution are cornerstones of our behaviors. They define who we are as an organization and as individuals. Everyone is encouraged to have personal development plans. By doing so, our team members are on their way to achieve their highest potential and be successful in their personal and professional lives.
Must be legally eligible to work in the United States without sponsorship, now or in the future, to be considered.
Who is Customers Bank?
Founded in 2009, Customers Bank is a super-community bank with over $22 billion in assets. We believe in dedicated personal service for the businesses, professionals, individuals, and families we work with.
We get you further, faster.
Focused on you: We provide every customer with a single point of contact. A dedicated team member who&rsquo;s committed to meeting your needs today and tomorrow.
On the leading edge: We&rsquo;re innovating with the latest tools and technology so we can react to market conditions quicker and help you get ahead.
Proven reliability: We always ground our innovation in our deep experience and strong financial foundation, so we&rsquo;re a partner you can trust.
What You&rsquo;ll Do
We are seeking an experienced and motivated Cloud Security Specialist is accountable for evaluating the Bank&rsquo;s cloud security posture, cloud environment (Azure and Office) and overall security. They are responsible for implementing proactive security initiatives in the Bank&rsquo;s cloud and email environments and the discovery of sensitive data and ensuring DLP strategies are deployed.
This position requires the candidate to have knowledge in configuring and implementation of different Azure and Microsoft Defender (CASB) tools/solutions.
Key Responsibilities:<ul><li>
Develop, implement, and maintain cloud security strategies, policies, and standards across the organization.</li><li>
Integrate security best practices into multi-cloud and hybrid environments (e.g., AWS, Azure, GCP).</li><li>
Monitor cloud environments for security threats, vulnerabilities, and breaches.</li><li>
Respond to security incidents by identifying root causes, mitigating risks, and coordinating corrective measures.</li><li>
Collaborate with the Incident Response team to analyze cloud-specific threats and resolve issues promptly.</li><li>
Conduct risk assessments for cloud platforms and services to identify and mitigate potential security threats.</li><li>
Ensure compliance with industry standards, regulations, and frameworks (e.g., ISO 27001, SOC 2, NIST, CIS benchmarks).</li><li>
Provide security guidance to ensure adherence to organizational security policies.</li><li>
Implement least privilege principles and ensure secure authentication and authorization mechanisms.</li><li>
Assist in securing cloud infrastructure services, including storage, compute, containers, and networks.</li><li>
Assist in supporting cloud security log monitoring architecture, design and implementation activities</li><li>
Develop and deploy automated security solutions for continuous monitoring, threat detection, and configuration management.</li><li>
Perform regular audits to ensure effective use of security tools and technologies.</li><li>
Implement remediations and proactive measures to address vulnerabilities and misconfigurations.</li><li>
Collaborate with cross-functional teams (e.g., DevOps, IT, compliance) to embed security into cloud projects and initiatives.</li><li>
Educate staff and stakeholders on cloud security risks, technologies, and best practices.</li><li>
Document cloud security policies, processes, and incidents.</li><li>
Generate reports for stakeholders, summarizing cloud security posture, risks, and improvements.</li><li>
Stay up-to-date with evolving cloud security trends, technologies, and threats.</li><li>
Provide recommendations to enhance the overall cloud security posture and align with organizational goals.</li></ul>
Suggested Skills<ul><li>
Financial industry experience</li><li>
Knowledge of Cloud/Azure best security practices, DLP and how to configure best practices for data protection and how to discover sensitive data/PII and preform security assessments on cloud environments</li><li>
Experience with cloud provider and using security tools and techniques.</li><li>
Knowledge of cloud services and their attack surface.</li><li>
Related industry certifications (Sec+, CTIA, CISSP)
</li></ul>Qualifications<ul><li>
Bachelor's Degree in Computer Science, Cybersecurity, or similar work experience in a related field</li><li>
Cloud security experience
</li><li>2-3 years of cyber security experience
</li><li>Constant learner
</li><li>Has experience in at least one of the main cloud providers (AWS, Azure, Google)</li></ul>
Customers Bank is an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. 
We also provide &ldquo;reasonable accommodations&rdquo;, upon request, to qualified individuals with disabilities, in accordance with the Americans with Disabilities Act and applicable state and local laws. 
Diversity Statement: 
At Customers Bank, we believe in working smart, working together, and having fun while delivering innovative solutions and memorable experiences for our customers. We are committed to the continual advancement of a culture which reflects the value we place on diversity, equity, and inclusion. We honor the diverse experiences, perspectives, and identities of our team members, and we recognize that it is their passion, creativity, and integrity that drives our success. Step into your future with us! Let&rsquo;s take on tomorrow.</div>

Cloud Security Specialist

Hex Technologies

SF, NYC, or Remote (USA)
 About the role
 
We are looking for an experienced Cloud Security Engineer to join Hex’s security team. You will be responsible for ensuring the security and resilience of our cloud infrastructure, providing leadership in cloud security practices, and collaborating closely with our infrastructure and engineering teams to secure our cloud-native applications.
 
About the role: 
Design, implement, and manage security solutions and controls for AWS environments and Kubernetes clusters, including appropriate isolation/sandboxing methods for Hex’s RCE-as-a-Service platform
 Build, deploy, and maintain infrastructure-as-code using Terraform, ensuring robust security standards are enforced.
 Conduct security assessments, threat modeling, and audits on AWS cloud infrastructure and Kubernetes deployments.
 Collaborate with development and operations teams to embed security best practices into CI/CD pipelines.
 Monitor and respond to cloud security incidents, identifying root causes and recommending remediation actions.
 Provide expertise in compliance requirements related to cloud security (e.g., SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS).
 Mentor engineers and advocate for cloud security across the organization.
 
About you: 
5+ years of experience in cloud security engineering, with extensive expertise in AWS.
 Demonstrated proficiency with Kubernetes security including cluster hardening, role-based access control (RBAC), network policies, and container vulnerability management.
 Expert-level knowledge and hands-on experience with Terraform.
 Familiarity with AWS security services (e.g., IAM, GuardDuty, Security Hub, CloudTrail, WAF).
 Familiarity with CNAPP solutions such as Wiz
 Familiarity with SIEM solutions such as Panther
 Solid understanding of secure software development lifecycle practices, CI/CD security, and DevSecOps methodologies.
 Relevant certifications such as AWS Certified Security – Specialty, Certified Kubernetes Security Specialist (CKS), and Terraform Associate certification are highly desirable.
 Bonus points for security certifications from SANS or OffSec.
 Excellent problem-solving, communication, and leadership skills.
 Our Engineering team
 
We’re a group of engineers who are forging new ground together and love partnering with Security on our journey to pull ahead of our competition. You can read about how we think through problems as well as how we learn from mistakes on our blog here:
 
How we took down production…
 Beyond Linear Notebooks
 A pragmatic approach to live collaboration
 Our stack
 
Our product is a web-based notebook and app authoring platform. Our frontend is built with Typescript and React, using a combination of Apollo GraphQL and Redux for managing application state and data. On the backend, we also use Typescript to power an Express/Apollo GraphQL server that interacts with Postgres, Redis, and Kubernetes to manage our database and Python kernels. Our backend is tightly integrated with our infrastructure and CI/CD, where we use a combination of Terraform, Helm, and AWS to deploy and maintain our stack.
 
In addition to our unique culture, Hex proudly offers a competitive total rewards package, including but not limited to, market-benched salary & equity, comprehensive health benefits, and flexible paid time off.
 
The salary range for this role is: $200,000 - $265,000
 
The salary range shown may be a reflection of additional factors such as geographical location and skill ranges/levels we’re open to. Placement in the salary range will be decided upon completion of the interview process, taking into account factors like leaving room for growth, internal fairness & parity, your demonstrated skills, and the depth of your experience. Our Recruiting team will be able to provide more details during the interview process.
 
By submitting an application the candidate consents to the use of their personal information in accordance with the Hex Privacy policy: https://learn.hex.tech/docs/trust/privacy-policy.
 
About Hex
 
Hex is growing our team of builders on a mission to make everyone a data person. Our platform solves key pain points with today's data and analytics tooling, and empowers anyone to explore data using natural language, with or without code, on trusted context. Thousands of customers like Ramp, Figma, Stubhub, Anthropic, and Gamma love Hex for our beautiful UI, agentic superpowers, and boundless flexibility.
 
Hex has raised over $100M from leading investors like Sequoia, a16z, Snowflake and Amplify. With office hubs in San Francisco and New York, as well as remote team members throughout the US and UK, we're a high-agency team that ships fast and has fun doing it. Check out our Intro to Hex video and employee handbook to learn more about what it's like to work at Hex.

Cloud Security Engineer

Apex Technology

<div>Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.
For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.
Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.
We&rsquo;d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. 
 
This role plays a critical part in protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring full compliance with federal standards such as NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
 
 
The candidate must hold an active Secret clearance (TS/SCI preferred) and bring hands-on experience securing cloud platforms in regulated environments. This role will help the organization meet industry standards such as SOC2, ISO 27001, PCI-DSS, GDPR/CCPA, or other relevant compliance frameworks.<h1 class="jobSectionHeader">
Responsibilities:
</h1><ul><li>Design and implement secure cloud architectures and configurations across AWS GovCloud, Azure, and/or Google Cloud, applying best practices for least privilege encryption, network segmentation, and data protection.</li><li>
Implement and maintain cloud security frameworks, ensuring ongoing compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and Secure Cloud Computing Architecture (SCCA) requirements.</li><li>
Configure and manage Identity and Access Management (IAM), Role-Based Access Control (RBAC), Just-In-Time (JIT) access, Key Vaults, and Zero Trust Architecture (ZTA) principles across cloud environments.
</li><li>Engineer, deploy, and optimize cloud-native security tools, including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM (Elastic) platforms for threat detection, monitoring, and response.</li><li>
Conduct vulnerability assessments, penetration testing simulations, security configuration reviews (against STIGs, CIS benchmarks, and NIST controls), and continuous 
monitoring of cloud resources.</li><li>
Develop, maintain, and update System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action &amp; Milestones (POA&amp;M), and risk/compliance reporting for cloud-based operations.</li><li>
Identify, analyze, and respond to Indicators of Compromise (IoCs), threat intelligence, and security incidents within cloud environments; perform root-cause analysis and implement preventive controls.
</li><li>Perform periodic security reviews and audits of cloud environments (Azure, AWS, hybrid) to ensure sustained compliance, mitigate evolving threats, and update policies/procedures.</li><li>
Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines, automate security controls, and support secure cloud migrations or 
modernization initiatives.</li><li>
Assess current cloud architectures, propose security improvements, review designs through a security lens, and serve as a subject-matter expert on cloud security tools, 
processes, and best practices.</li><li>
Coordinate with configuration management teams to ensure hardware/software changes adhere to security protocols, maintain version control, and support documentation of the cyber terrain.</li><li>
Develop, enforce, and maintain cloud security policies, standards, and automated guardrails to support secure CI/CD pipelines and infrastructure-as-code (IaC) practices (e.g., using Terraform, CloudFormation).</li><li>
Monitor cloud environments for security incidents, investigate alerts, perform root-cause analysis, and coordinate incident response activities.
</li><li>Identify emerging threats and recommend proactive improvements to cloud security posture, including automation of security controls and processes.</li><li>
Provide guidance and training to engineering teams on secure cloud design patterns and best practices.</li><li>
Ability to be on-site 5 days a week at our office Playa Vista.
</li></ul><h1 class="jobSectionHeader">Requirements:</h1><ul><li>
Security Clearance: Active U.S. Secret clearance required (TS/SCI)</li><li>
Must be a U.S. citizen.</li><li>
Education: Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Computer Science, or a related field (or 5+ years equivalent professional experience in cloud security engineering)</li><li>
Experience: 5&ndash;9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.
</li><li>Strong analytical, problem-solving, communication, and collaboration skills; ability to work in fast-paced, mission-critical environments. 
 
<h1 class="jobSectionHeader">Technical Skills:</h1><ul><li>
Deep knowledge of cloud platforms (AWS GovCloud, Azure Government, etc.), IAM/RBAC, encryption, network security, and cloud-native security services.</li><li>
Familiarity with SIEM, vulnerability scanners, threat intelligence, and automation tools (e.g., Terraform, Python scripting).</li><li>
Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, NESSUS, BURP SUITE, Microsoft Defender, or AWS equivalents.</li><li>
Deep understanding of network security, encryption, logging/monitoring, and container/Kubernetes security.</li><li>
Experience with infrastructure-as-code, scripting (Python, PowerShell, etc.), and security automation tools.</li></ul></li><li>
Additional Certifications:
<ul><li>CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect (Associate or Professional), Microsoft Certified: Security, Compliance &amp; Identity, Security+, CEH, or CSSP related (e.g., CySA+, GCIH).</li></ul></li></ul><h1 class="jobSectionHeader">
Why Join Apex?</h1>
Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup backed by $200M in Series D funding, and we invest heavily in our people from day one.<h2 class="jobSectionHeader">
What We Offer For Full-time Employees:</h2><ul><li>
Shared upside: Receive equity in Apex, letting you benefit from the work you create</li><li>
Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost</li><li>
Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays</li><li>
Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%</li><li>
8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel</li><li>
Daily catered lunch and unlimited snacks to keep you fueled throughout the day</li><li>
Vibrant community: Monthly office BBQs, pickleball tournaments, run club, and social gatherings for you and your family</li><li>
Your dream desk setup and all the tools you need to be your most productive self</li><li>
World-class Playa Vista office with EV chargers, with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life</li><li>
Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference</li></ul>
Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.<h1 class="jobSectionHeader">
Equal Opportunity Employer</h1>
Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.
Compensation Range: $120K - $170K</div>

Openkyber

<div>job summary:
Overview We are seeking a Cloud Security Engineer to join our cybersecurity team. This role is responsible for helping secure enterprise cloud environments across Azure, AWS, Google Cloud Platform (Google Cloud Platform), and Oracle Cloud Infrastructure (OCI). The ideal candidate will work closely with cloud engineering, application, and network teams to identify security risks, improve cloud security controls, and support the organization's overall cloud security strategy.
Key Responsibilities
<ul><li>Support the security of cloud environments across multiple cloud providers.</li>
<li>Help manage and operate Cloud Security Posture Management (CSPM) tooling to identify and remediate security risks.</li>
<li>Review cloud configurations and architectures to ensure security best practices are followed.</li>
<li>Work with engineering teams to address security findings and reduce risk.</li>
<li>Support security for cloud-hosted applications, platforms, and container environments.</li>
<li>Assist with securing container platforms and orchestration technologies.</li>
<li>Support cloud network security and secure access solutions, including SASE-related controls.</li>
<li>Investigate cloud security alerts and incidents and coordinate remediation efforts.</li>
<li>Contribute to the development and maintenance of cloud security standards and policies.</li>
<li>Assist with security reviews for AI and emerging cloud technologies.</li>
<li>Help automate security processes and improve visibility across cloud environments.</li>
</ul>Required Skills &amp; Qualifications
<ul><li>Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience).</li>
<li>5+ years of experience in cybersecurity, with a focus on cloud security or cloud platforms.</li>
<li>Experience working with one or more major cloud providers (Azure, AWS, Google Cloud Platform, or Oracle Cloud).</li>
<li>Familiarity with cloud security tools, including CSPM solutions.</li>
<li>General understanding of cloud identity, networking, and security best practices.</li>
<li>Experience supporting application, container, or platform security in cloud environments.</li>
<li>Experience participating in security investigations or incident response activities.</li>
<li>Strong problem-solving skills and the ability to work across teams.</li>
<li>Clear written and verbal communication skills.</li>
</ul>Preferred Qualifications
<ul><li>Experience supporting multi-cloud environments.</li>
<li>Familiarity with container platforms and cloud-native architectures.</li>
<li>Experience using SIEM tools such as Splunk.</li>
<li>Interest or experience in securing AI or emerging cloud technologies.</li>
</ul>For applications and inquiries, contact: hirings@openkyber.com</div>

Junior Cloud Engineer

<div>Title: Prisma Cloud Engineer Location: Dallas, TX (Hybrid) Duration: Contract / Full Time Job Description:
Looking for an experienced Prisma Cloud Engineer with 6+ years of experience in cloud security and hands-on expertise in deploying and integrating Prisma Cloud/Cortex Cloud across multi-cloud environments (AWS, Azure, Google Cloud Platform, OCI). The candidate will act as a Cloud Security SME and be responsible for implementing CSPM, CWPP, CIEM, and Kubernetes security controls.
Required Skills:
<ul><li>6+ years of experience in Cloud Security Engineering</li>
<li>Hands-on experience with Prisma Cloud / Cortex Cloud deployment and integration</li>
<li>Strong knowledge of CSPM, CWPP, CIEM, and KSPM implementations</li>
<li>Experience securing AWS, Azure, Google Cloud Platform, OCI cloud environments</li>
<li>Experience with containers, Kubernetes security, and runtime protection</li>
<li>Experience integrating IaC security in CI/CD pipelines (Terraform, CloudFormation, Jenkins, GitLab, Azure DevOps, GitHub Actions)</li>
<li>Strong knowledge of IAM, least privilege, and cloud security best practices</li>
<li>Experience integrating security tools with SIEMs, APIs, and automation</li>
<li>Excellent communication and client-facing skills</li>
</ul>Responsibilities:
<ul><li>Deploy and onboard Prisma/Cortex Cloud across multiple cloud accounts</li>
<li>Configure and manage CSPM policies to detect and remediate cloud misconfigurations</li>
<li>Implement CWPP for host, container, and serverless workload protection</li>
<li>Configure CIEM to optimize IAM policies and enforce least privilege access</li>
<li>Implement Kubernetes Security Posture Management (KSPM) for cluster security</li>
<li>Integrate Prisma Cloud with SIEM, ticketing systems, and enterprise tools</li>
<li>Implement IaC security scanning within CI/CD pipelines</li>
<li>Work with clients to assess security posture and implement best practices</li>
</ul>For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Cloud Support Intern

Deloitte

<div>
 
 Cyber Security I DevSecOps &amp; Cloud Security Senior Engineer, Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte.
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related service to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 As a
 
 
 DevSecOps &amp;
 
 
 
 
 Cloud Security
 
 
 
 
 Senior Engineer
 
 ,
 
 you can expect to be involved in the following activities:
 
 
 We are seeking a highly skilled and experienced Cloud Security Engineers with a specialization in one of the four public clouds, Oracle Cloud Infrastructure (OCI), Google Cloud Platform (GCP), Microsoft Azure and Amazon Web Services (AWS). The ideal candidate will be responsible for ensuring the security of clients&rsquo; cloud environments, by implementing and maintaining robust security measures and monitoring systems for potential threats. This role requires deep technical expertise in cloud security best practices, strong analytical skills, and the ability to collaborate effectively with cross-functional teams.
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Design, implement, and manage security controls, policies, and procedures for the cloud environment to safeguard against unauthorized access, data breaches, and other security risks.
 </li>
 <li>
 Conduct regular security assessments and audits of the security environment infrastructure, identifying vulnerabilities and areas for improvement, and recommending solutions to mitigate risks.
 </li>
 <li>
 Develop and enforce cloud security best practices and policies across the organization.
 </li>
 <li>
 Collaborate with development and operations teams to ensure secure deployment and operation of cloud applications.
 </li>
 <li>
 Implement native cloud security controls, such as IAM, VM, EDR, cloud security posture management to ensure appropriate access to cloud resources.
 </li>
 <li>
 Stay current with emerging cloud security threats, technologies, and best practices.
 </li>
 <li>
 Provide security training and guidance to team members and stakeholders on cloud security measures.
 </li>
 <li>
 Work with regulatory bodies to ensure compliance with industry standards and Middle East regulations related to cloud security.
 </li>
 <li>
 Manage and configure security tools and software, such as firewalls, intrusion detection systems, and encryption technologies, within cloud environments.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 In order to succeed in this role, you will need to match the following criteria:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Security, or a related field.
 </li>
 <li>
 Minimum of 3 years of related experience.
 
 
 </li>
 </ul>
 Strong hands-on experience on
 
 TWO
 
 of the below five domains:
 
 
 
 Cloud And Container Security
 
 
 
 <ul>
 <li>
 Experience with AWS, Azure, GCP or OCI and demonstrable affinity with Cloud technology.
 </li>
 <li>
 Experience with containerization: Kubernetes, Docker. Practical experience with serverless and secure development environments, infrastructure-as-code is a plus.
 </li>
 <li>
 Knowledge of information security principles and guidelines (including CIS, MITRE ATT&amp;CK frameworks) is an advantage.
 
 
 </li>
 </ul>
 
 Governance And Risk Assessment
 
 
 
 <ul>
 <li>
 Experience with security frameworks such as ISO, CSA and PCI.
 </li>
 <li>
 Experience with the implementation of cloud risk frameworks and optimization of controls (in CI/CD pipelines).
 
 
 </li>
 </ul>
 
 Architecture And Design
 
 
 
 <ul>
 <li>
 Experience with Secure Cloud Architecture Design and Implementation; Design solutions for improving Cloud Security by enforcement of cloud security guardrails and standards.
 </li>
 <li>
 Experience with architecture and security reviews, threat modelling applications, and identifying areas of risk.
 </li>
 <li>
 Experience with encryption in-flight and at-rest practices, as well as certificate and secrets
 </li>
 <li>
 Knowledge of network architectures, topologies, and concepts (Firewalls, LB, WAF, CDN, VPC, ACL, TLS, SSH, and DNS).
 </li>
 <li>
 Experience with security solutions such as WAF, IPS, and anti-DDOS systems.
 </li>
 <li>
 Experience with network / perimeter security platforms and routing protocols, OSI layers etc.
 </li>
 <li>
 Experience implementing strategies to support secure and compliant architectures.
 
 
 </li>
 </ul>
 
 DevOps &amp; Engineering
 
 
 
 <ul>
 <li>
 Good knowledge of application architecture (Microservices, API gateway, service mesh, message queues etc.) and technical expertise in designing controls to secure each layer within the application architecture (web layer, integration layer, backend).
 </li>
 <li>
 Strong understanding of authentication and authorization patterns and their applicability within the development context (knowledge of Authentication / Authorization protocols and patterns, Authentication and Authorization within microservices).
 </li>
 <li>
 Experience with infrastructure automation, infrastructure as code, automated application deployment, monitoring/telemetry, logging, reporting/dashboarding, and continuous delivery technologies.
 
 
 </li>
 </ul>
 
 Application Security &amp; DevSecOps
 
 
 
 <ul>
 <li>
 Experience in cybersecurity principles, assessment and triage for security flaws and common vulnerabilities for web and mobile applications. Ability to understand and assess both threats and vulnerabilities, articulating these to both technical and business stakeholders.
 </li>
 <li>
 Experience with continuous security practices, including threat modelling, threat and vulnerability management, secure coding practices, and automated penetration testing.
 </li>
 <li>
 Understanding of the OWASP Top 10 application security risks and how to address them.
 </li>
 <li>
 Working knowledge of the Security Development Lifecycle (SDLC), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM).
 </li>
 <li>
 Understanding of web application security scanning software and related penetration testing tools such as SAST/DAST/IAST/SCA.
 </li>
 <li>
 Understanding of service-oriented architecture, building internet-scale, distributed, and critical services.
 </li>
 <li>
 Experience on integration &amp; automation of various security technologies.
 
 
 </li>
 </ul>
 
 Preferred Certifications
 
 
 
 <ul>
 <li>
 Cloud Certifications by AWS/GCP/OCI/Azure.
 </li>
 <li>
 Kubernetes Certifications
 </li>
 <li>
 Relevant certifications such as CISSP, CCSP, AWS Certified Security &ndash; Specialty, or equivalent are highly desirable.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 An ability to remain calm under pressure whilst continuing to pay attention to detail.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, Consulting
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I DevSecOps & Cloud Security Senior Engineer, Cairo, Egypt.

Booz Allen Hamilton

<div>Cloud Security Engineer
The Opportunity:
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.
You Have:<ul><li>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</li><li>
4+ years of experience with secure IT architecture and computing hardware and software</li><li>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</li><li>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</li><li>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</li><li>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</li><li>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</li></ul>
Nice If You Have:<ul><li>
Experience assessing and authorizing network connections between on-premise and cloud</li><li>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</li><li>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</li><li>
Experience with code management tools such as Git or GitLab in a team setting</li><li>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</li><li>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</li><li>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</li><li>
Ability to work independently and as an integrated member of a project team</li><li>
Possession of excellent verbal and written communication skills</li><li>
TS/SCI clearance</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Search 10000+ Cloud security specialist jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 cloud security specialist jobs Near Me

Cloud Security Specialist

Cloud Security Engineer

Cloud Security Engineer

Junior Cloud Engineer

OCI Cloud Support Intern

Deloitte Innovation Hub I Cyber Security I DevSecOps & Cloud Security Senior Engineer, Cairo, Egypt.

Cloud Security Engineer