• Manage and oversee the Information Security Program.
• Analyze security controls and reporting on cloud implementations.
• Analyze current security posture and investigate potential areas of compromise that would bypass existing controls. Provide effective recommendations to reduce risk where applicable.
• Act as security point of contact in relations, with the ability to represent and communicate Security directives.
• Document work performed for all reviews, audits and assessments.
• Maintain familiarity with performing and presenting quantitative and qualitative risk analysis.
• Assist in ensuring all compliance programs (access review, entitlement review, code reviews, and security tests) are being maintained according to their set schedules.
• Establish automation processes for repeatable tasks to reduce work effort required for governance related tasks.
• Effectively communicate and escalate Security related risks and vulnerabilities based on application, or environment. Support Incident Response activities during security events or incidents.
• Support the commitment to protect customers’ integrity and confidentiality of systems and data.
• Serve as the primary resource for Security monitoring, identifying or obtaining response to issues and optimization. Perform activities such as setting baselines for monitoring alerts, reducing 'noise' from excessive monitoring notifications and creating actionable alerts and reports.
• Perform internal and vendor risk assessments on applications, services, tools, and cloud infrastructures across projects.
• Assist in the testing and development of Incident response tabletop and functional exercises.

• Strong understanding of AWS/Azure and applicable hardening and security capabilities.
• Strong familiarity with Linux and Windows operating systems and cloud provider ecosystems like Amazon AWS, GCP
• Practical knowledge of Cloud foundation services related to compute, network, storage, content delivery, administration and security, deployment and management, automation technologies
• Robust micro services programming (AWS Lambda, Docker, etc.)
• Extensive experience architecting, designing, and programming applications and ample experience in high level programming languages such as Go, Java, Python, PHP,Javascript.
• Capability architecting highly available systems that utilize load balancing, horizontal scalability and high availability
• DevOps know-how building and deploying infrastructure with cloud deployment, build and test automation technologies like ansible, chef, puppet, docker, jenkins, etc.
• Understanding of complex enterprise environments and current technology areas like cloud and mobility
• Certification: It is important that applicants for the cloud security engineer position have CISSP or equivalent security-related industry certifications and AWS Associate or higher Certification
• Communication skills: In executing their duties, cloud security engineers must communicate with various audiences, including business leaders, engineers, clients, and team members. It is important that they have great verbal communication skills to convey information to the relevant audience. They also require exceptional written communication skills, documentation and reporting
• Teamwork abilities: The Cloud Security Engineer is expected to work with various multi-disciplinary teams, so it is vital that they are team-oriented individuals with priority on the successful completion of group goals

The certifications most favored for cloud security are those focused on network architecture and administration, including:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Information Systems Security Architecture Professional (ISSAP)
• Certified Cloud Security Professional (CCSP)