Senior Cloud Security Specialist

BamboohrWashingtonContract

Continue with your CV

PDF, Word, or image. Under 10MB.

Upload CV

Apply now

Job description

Senior Cloud Security Specialist at Bamboohr.

About the role

As a Senior Cloud Security Specialist at Bamboohr, you will play a pivotal role in safeguarding our cloud infrastructure and ensuring the integrity of our clients' data. This position requires a deep understanding of cloud security principles and practices, as well as the ability to implement robust security measures across various cloud platforms. You will work closely with cross-functional teams to identify vulnerabilities, develop security protocols, and respond to incidents, all while maintaining compliance with industry standards. Your expertise will be essential in shaping the security strategy for our cloud services and enhancing our overall security posture.

Key facts

Location: Washington

Engagement: Contract

Salary: Competitive, commensurate with experience

Visa: Sponsorship available for qualified candidates

What you'll do

Design and implement comprehensive cloud security strategies that align with organizational goals and compliance requirements.
Conduct thorough risk assessments to identify vulnerabilities within cloud environments and recommend appropriate mitigation strategies.
Collaborate with development and operations teams to integrate security best practices into the software development lifecycle (SDLC).
Monitor cloud infrastructure for security breaches and incidents, responding promptly to mitigate risks and minimize impact.
Develop and maintain security policies, procedures, and standards to ensure compliance with regulatory requirements and industry best practices.
Lead security audits and assessments, providing actionable insights and recommendations for improvement.
Stay current with emerging cloud security threats and trends, adapting security measures accordingly to protect against new vulnerabilities.
Provide training and guidance to team members on cloud security protocols and best practices, fostering a culture of security awareness.
Work with third-party vendors to assess and manage security risks associated with external services and integrations.
Prepare detailed reports and documentation on security incidents, assessments, and compliance status for stakeholders.
Participate in incident response planning and execution, ensuring that the organization is prepared to handle security breaches effectively.
Collaborate with legal and compliance teams to ensure alignment with data protection regulations and standards.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
A minimum of 5 years of experience in cloud security, with a focus on securing cloud environments such as AWS, Azure, or Google Cloud Platform.
Strong understanding of cloud security frameworks and compliance standards, including ISO 27001, NIST, and GDPR.
Proven experience in conducting security assessments, vulnerability management, and incident response in cloud environments.
Proficiency in security tools and technologies, such as firewalls, intrusion detection systems, and encryption protocols.
Excellent problem-solving skills and the ability to think critically under pressure.
Strong communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
Relevant certifications such as CISSP, CCSP, or AWS Certified Security Specialty are highly desirable.

Nice to have

Experience with DevSecOps practices and tools, integrating security into CI/CD pipelines.
Familiarity with container security and orchestration tools like Docker and Kubernetes.
Knowledge of scripting languages such as Python, Bash, or PowerShell for automation of security tasks.

Skills & tools

Cloud platforms: AWS, Azure, Google Cloud Platform
Security frameworks: ISO 27001, NIST, CIS
Security tools: SIEM, IDS/IPS, vulnerability scanners
Programming/scripting: Python, Bash, PowerShell
Incident response and management

Practical notes

This position is a contract role based in Washington, D.C., and offers a competitive salary based on experience. Candidates must be eligible to work in the U.S., and visa sponsorship is available for qualified individuals. The ideal candidate will possess a strong background in cloud security and demonstrate a proactive approach to identifying and mitigating risks. If you are passionate about cloud security and eager to contribute to a dynamic team, we encourage you to apply through our website.