Sr. Cloud Security Engineer

We are seeking an experienced AWS Cloud Security Engineer to support enterprise application migration initiatives by assessing application architectures, identifying security risks, and ensuring compliance with cloud security standards. The ideal candidate will have hands-on experience in AWS security, IAM, cloud networking, Terraform, vulnerability management, and secure cloud migration programs.

The role involves collaborating with application owners, cloud engineering, cybersecurity, enterprise architecture, and network teams to address security findings and implement reusable security controls and cloud governance standards.

Key Responsibilities

• Partner with application teams to assess application design, security requirements, and migration readiness.
• Support security-related migration activities, including firewall, access, tooling, and policy exception requests.
• Conduct security assessments of applications and infrastructure migrating to AWS.
• Review workload architecture, IAM, RBAC, privileged access, service accounts, authentication, and authorization models.
• Assess AWS security groups, firewall rules, network segmentation, connectivity, and application communication flows.
• Evaluate vulnerability management, patching, OS hardening, and cloud security configurations.
• Review encryption, data protection, security logging, monitoring, and threat detection capabilities.
• Identify security risks, technical debt, and modernization opportunities during cloud migration.
• Collaborate with Cloud Engineering teams to improve Terraform modules, Infrastructure as Code (IaC) standards, IAM frameworks, security guardrails, and monitoring solutions.
• Work with Cybersecurity, Enterprise Architecture, Risk and Governance, Network Engineering, application teams, and system integration partners.
• Establish remediation plans and ownership for security findings that cannot be resolved during migration.
• Identify recurring security issues and recommend platform-wide improvements.
• Apply AWS Well-Architected Framework principles and organizational security standards.
• Support continuous improvement initiatives to make future cloud migrations more secure, standardized, and efficient.