Senior Information Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Cloud Security Engineer operating CNAPP platforms and securing cloud environments at First American India. Driving cloud risk remediation across infrastructure, applications, Kubernetes, and DevSecOps teams.
Responsibilities:
- Implement, configure, and administer the organization's enterprise CNAPP platform across cloud environments
- Onboard cloud accounts, subscriptions, projects, Kubernetes clusters, container registries, and other supported cloud resources into the CNAPP platform
- Configure integrations with AWS, Microsoft Azure, GCP, Kubernetes, CI/CD platforms, identity providers, ticketing systems, SIEM, and other security tools
- Maintain CNAPP policies, rules, connectors, permissions, integrations, and platform configurations
- Monitor platform health, coverage, data ingestion, scanning status, and integration failures
- Evaluate and implement new CNAPP capabilities as the organization's cloud environment and security requirements evolve
- Review findings related to cloud infrastructure, identity, networking, storage, compute, containers, Kubernetes, serverless technologies, and cloud-native services
- Work with cloud engineering teams to establish secure cloud configuration baselines
- Analyze vulnerabilities and security findings affecting cloud workloads, virtual machines, containers, images, and cloud-native services
- Prioritize findings based on exploitability, exposure, asset criticality, attack paths, and business context
- Work with infrastructure and application teams to drive remediation
- Use CNAPP capabilities to identify externally exposed resources, vulnerable workloads, excessive privileges, and exploitable attack paths
- Collaborate with Cloud Platform, DevOps/DevSecOps, Application Security, Security Operations, Vulnerability Management, and application teams to improve cloud security posture
Requirements:
- Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent professional experience
- 7+ years of Information Security experience, including significant hands-on cloud security experience
- Strong hands-on experience with at least one major cloud platform: Microsoft Azure, AWS, or GCP
- Hands-on experience with enterprise CNAPP platforms such as Orca Security, Wiz, Microsoft Defender for Cloud, Palo Alto Prisma Cloud, or equivalent technologies
- Strong understanding of cloud security architecture, cloud IAM and least privilege, cloud networking and exposure, vulnerability management, containers and Kubernetes security, Infrastructure-as-Code security, cloud logging and monitoring, and security configuration management
- Experience analyzing and remediating cloud security findings
- Experience working with APIs and automation using Python, PowerShell, or equivalent scripting languages
- Familiarity with CI/CD pipelines and DevSecOps practices
- Ability to troubleshoot complex security integrations and cloud configurations
- Strong analytical, problem-solving, documentation, and communication skills
- Familiarity with MITRE ATT&CK, particularly cloud-related attack techniques
- Relevant certifications such as CCSP, CCSK, AWS Security Specialty, Microsoft Azure Security Engineer, Google Professional Cloud Security Engineer, or CISSP/equivalent
Benefits:
- Equal Opportunity Employer committed to an inclusive, non-discriminatory workplace
- Best Workplaces for Women and Workplace with Inclusive Practices certifications
- Fortune 100 Best Companies to Work For recognition
Similar Jobs
Senior Information Security Engineer
Information Security Engineer monitoring threats and vulnerabilities for First American's title insurance, settlement, and property technology solutions. Operating security tools, incident response, risk analysis, and recovery processes.
Senior Security Consultant
Senior Security Consultant designing low-voltage and communication systems for ARES data center infrastructure projects. Coordinating BIM, documentation, budgets, and project stakeholders.
Red Team Security Engineer
Red Team Security Engineer validating vulnerabilities, attack paths, and AI-enabled systems. Strengthening defenses for Backblaze’s open cloud storage platform through offensive and purple-team exercises.
Online Visiting Professor – Cybersecurity
Online Visiting Professor teaching undergraduate and graduate cybersecurity courses for DeVry University. Developing course materials, assessing students, and integrating responsible AI into instruction.
Information Security Specialist
Information Security Specialist protecting Farmers’ global insurance systems and data from cybersecurity risks. Assessing vulnerabilities, managing incidents, strengthening controls, and advising technology teams.
Strategic Solution Sales Executive – Cybersecurity
Strategic cybersecurity sales executive driving OpenText solution growth across U.S. enterprise accounts. Leading complex solution sales cycles and executive stakeholder engagements.
Security Cooperation Financial Management Specialist – Lead
Financial management specialist supporting U.S. Combatant Commands with DAI accounting, audit readiness, and process improvement. Remote role for Koniag Government Services’ federal defense operations.
Manager, Application Security – SOX IT, Oracle Fusion
Application Security Manager securing Oracle Fusion, EPM, and OIC environments for Paramount’s global media and entertainment company. Leading SOX compliance, identity governance, and segregation-of-duties controls.
Senior Security Engineer, Threat Detection and Response
Senior Security Engineer investigating threats, building detection automation, and improving incident response. Supporting U.S.-based corporate and production environments through security engineering and threat hunting.
Staff Security Engineer, Security Enablement
Staff Security Engineer designing DoorDash’s global physical and cloud security systems. Leading multi-team programs, AWS infrastructure, security integrations, and enterprise risk reduction.
Cybersecurity Intern
Cybersecurity Intern gaining hands-on experience in security operations, vulnerability management, and incident response. Supporting cybersecurity projects at global electronics manufacturer Kimball Electronics.
Ethical Hacker – Penetration Tester
Pentester conduzindo avaliações ofensivas em infraestrutura, aplicações, redes Wi-Fi e soluções de IA. Grupo Trade Technology oferece tecnologia, segurança e transformação digital.
Staff Mobile Security Engineer
Staff Mobile Security Engineer securing MrBeast’s large-scale mobile media, gaming, and fintech experiences. Owning device integrity, fraud defense, and security engineering team growth.
Security Engineer
Security Engineer investigating high-impact incidents and building SIEM-based detections for Expleo, a global engineering and technology services provider. Remote role for candidates living in Portugal.
Information Security Officer
Information Security Officer maintaining Finom’s certified ISMS, risk framework, audits, and supplier assessments. Supporting compliance for the company’s European B2B financial platform.
Information Security Officer
Information Security Officer maintaining ISMS, audits, and ICT risk management for Finom’s European financial platform. Improving compliance through supplier assessments, reporting, automation, and regulatory monitoring.
Information Security Officer
Information Security Officer managing ISMS, audits, vendor assessments and ICT risk for Finom’s European financial platform. Reporting to the CISO and improving compliance through automation.
Application Security Architect
Application Security Architect securing NinjaOne’s unified IT operations platform. Leading threat modeling, secure architecture reviews, and security initiatives across software, cloud, infrastructure, and identity.
Security Consultant II
Security Consultant II leading Prolexic DDoS integration, testing, and project delivery. Advising Akamai customers on web security, mitigation, and long-term security strategy.
Senior Security Engineer, Enterprise Security
Senior Security Engineer engineering controls and automation for Databricks, the Data and AI company. Securing enterprise applications, identity, cloud, SaaS, and data systems.