T
Cloud Security Engineer
Не указаноПолная занятостьSecurity Solutions EngineeringPharmaceutical Manufacturing
An established biopharmaceutical company is seeking an experienced Cloud Security Engineer to design, implement, and operate security solutions across Azure, multicloud, container, application, and AI environments. The role combines cloud security architecture, DevSecOps automation, incident support
Обязанности
- Design and maintain cloud-native and third-party security controls across Azure and other cloud platforms
- Implement secure-by-design practices, IAM, network controls, data protection, logging, and workload security
- Secure containers and Kubernetes across build and runtime environments
- Monitor, investigate, and respond to cloud security incidents with SOC and engineering teams
- Build automation for security controls, compliance reporting, vulnerability detection, and remediation
- Integrate security testing and scanning into CI/CD pipelines and Infrastructure-as-Code workflows
- Embed application security controls throughout the SSDLC and support vulnerability remediation
- Assess dependencies, open-source libraries, container images, Kubernetes manifests, and software supply chain components
- Conduct cloud security assessments, audits, and continuous compliance monitoring against frameworks including GDPR, HIPAA, ISO 27001, and GxP
- Secure AI and generative AI services, including identity, access, data protection, and model lifecycle governance
- Provide technical guidance and mentorship to development, platform, infrastructure, and security teams
Требования
- Bachelor’s degree in Computer Science, Information Security, or a related field is preferred
- At least 3 years of experience in Cloud Security or DevSecOps
- Mandatory hands-on experience with Microsoft Azure and the AZ-500 certification
- Experience with IAM and RBAC, network security, WAF, ZTNA, encryption, secrets management, endpoint protection, and workload protection
- Experience with container, Kubernetes, CNAPP, or CSPM security
- Experience implementing SSDLC and DevSecOps practices
- Experience with SAST, SCA, container image scanning, secrets scanning, and application security tools
- Advanced PowerShell skills, plus Azure CLI, Python, REST APIs, and Microsoft Graph
- Experience with Terraform, Ansible, Azure DevOps, and GitHub
- Familiarity with SIEM and security monitoring tools
- Understanding of cloud architecture, networking, containers, secure application development, and software supply chain security
Будет плюсом
- Azure AZ-305 certification
- CISSP, CISM, CCSP, or Kubernetes security certification
- Experience with AWS or GCP
- Azure Arc and hybrid cloud experience
- Experience in regulated pharmaceutical or manufacturing environments
- Kubernetes, Docker, and container orchestration security
- Knowledge of OWASP Top 10, OWASP ASVS, and software supply chain security frameworks
Условия и преимущества
- Generous annual leave
- Reward plans
- Flexible working schedules, dependent on role
- Tailored health support
- Career development and learning programs
- Opportunities for internal growth