Cyber Security - Engineering Lead

About the role

In this pivotal role, you will play a key part in safeguarding our clients' digital assets through innovative cybersecurity practices. Your responsibilities will include the design, implementation, and ongoing management of security protocols that protect sensitive information and infrastructure. You will work closely with senior management, mentor junior team members, and engage in various cybersecurity projects to enhance our service offerings.

Key facts

What you'll do

• Continuously monitor and assess security data across various cloud platforms, conducting thorough investigations into incidents and fine-tuning detection protocols for multi-cloud environments.
• Formulate and execute identity management strategies tailored for cloud platforms, ensuring strict adherence to access controls and the principles of zero trust.
• Implement and oversee cloud-native security solutions to maintain compliance with established security standards and regulatory requirements.
• Safeguard cloud network configurations, manage data encryption, and protect workloads across leading cloud service providers.
• Embed security measures within development pipelines by utilizing infrastructure-as-code practices and scripting techniques.
• Advance internal security tools and automation frameworks by leveraging AI technologies, including large language models (LLMs).
• Collaborate with cross-functional teams to identify security vulnerabilities and recommend effective remediation strategies.
• Stay updated on the latest cybersecurity trends and threats, ensuring that our security practices evolve in response to emerging challenges.
• Conduct risk assessments and security audits to evaluate the effectiveness of current security measures and propose improvements.
• Provide training and guidance to junior team members, fostering a culture of security awareness and best practices within the organization.
• Engage with clients to understand their unique security needs and tailor solutions that align with their business objectives.
• Participate in incident response activities, contributing to the development of strategies for effective threat mitigation and recovery.

Requirements

• At least 5 years of experience in cybersecurity or cloud security engineering, with hands-on experience across a minimum of two major cloud service providers (AWS, GCP, Azure).
• Proven knowledge in zero-trust architecture, cloud networking, container security (Kubernetes, Docker), secrets management, vulnerability management, and data protection in multi-cloud environments.
• Understanding of compliance frameworks and cloud-native threat models, with the ability to apply them in practical scenarios.
• Strong analytical skills with a focus on problem-solving and critical thinking in high-pressure situations.
• Excellent communication skills, both verbal and written, to effectively convey complex security concepts to diverse audiences.
• Ability to work independently and collaboratively within a remote team environment.

Nice to have

• Professional certifications such as AWS Certified Security - Specialty, Google Cloud Professional Cloud Security Engineer, Microsoft Certified: Azure Security Engineer Associate (AZ-500), or CISSP.
• Experience with security automation tools and practices, enhancing the efficiency of security operations.
• Familiarity with DevSecOps practices and integrating security into the software development lifecycle.

Skills & tools

• Cloud Providers: AWS, GCP, Azure
• Security Tools: Azure Sentinel, AWS GuardDuty, AWS CloudTrail, Google Cloud Logging, Microsoft Defender for Cloud, AWS Security Hub, Google Cloud Security Command Center
• Identity Management: Azure Entra ID, AWS IAM, GCP Identity and Access Management, Role-Based Access Control (RBAC), Privileged Access Management (PAM)
• Cloud Networking: Azure Network Security Groups (NSGs), Application Gateways, AWS Security Groups, Network Access Control Lists (NACLs), Virtual Private Cloud (VPC), GCP VPCs, Cloud Armor, Firewall Rules
• Container Security: Kubernetes, Docker
• Automation: Terraform, CloudFormation, Google Cloud Deployment Manager, Python, Bash, PowerShell
• AI Tools: Claude, GitHub Copilot, LLM technologies

Practical notes

• This position is fully remote within the United States, allowing for flexibility in your work environment.
• As a full-time employee, you will have access to a comprehensive benefits package, which includes medical, dental, and vision insurance, a 401(k) plan with company matching, and generous paid time off.
• Riveron employs AI tools to streamline the hiring process, aiding in candidate screening and assessment, while ensuring that human judgment remains at the forefront of all final hiring decisions.