CBS - IT - Cloud Security Engineer - Senior Associate - 上海/北京/大连/重庆

The opportunity

We are looking for a Cloud Security Engineer, who will become part of our Security Technology Services Engineering team. In this role you will be involved in managing and coordinating activities related to cloud technologies, business drivers, and most importantly, security posture. In this role you will have the opportunity to work alongside like-minded individuals, stand up new technologies, and coordinate with internal and external groups to ensure the related systems are secure and robust.

Responsibilities

As an individual contributor, your time will be partially spent working in a coordinator capacity, assisting with process creation, organization, and platform changes related to our cloud security posture. You will use the remainder of time bringing operational expertise into efforts which introduce new technologies and upgrade current ones. Active project participation in new or integrated technologies as the Subject Matter Expert for the Information Security use cases pertaining to Cloud Security technology.

• Design, plan, manage, drive and coordinate planned maintenance activities as well as the standardization and automation of processes and procedures for Cloud Security technologies.

• Provide technical oversight of Information Security technologies that fall under the team’s responsibilities, confirming they are operating within agreed service levels and at peak possible performance

• Represent the team in specific Project activities, including Leading projects and managing the activity of others towards successful completion.

• Articulate technology issues/concerns that may emerge at any level of the technical stack, and from any component across the ecosystem, to senior business and technology leaders

Requirement:

• Approximately more than 3 years of experience in Information Security, with dedicated experience to hands-on Cloud Security engineering and operations.

• Mandatory Expertise in Cloud Native Application Protection Platform (CNAPP) components and practices:

o Cloud Security Posture Management (CSPM): Deep experience configuring, administering, and integrating CSPM tools (e.g., native cloud tools, Wiz, Palo Alto Prisma Cloud) for continuous compliance and risk assessment across major CSPs (Azure, Alicloud, or AWS).

o Cloud Workload Protection Platform (CWPP): Experience securing runtime workloads (VMs, Containers, Serverless) using CWPP solutions, including agent management, hardening, and policy enforcement.

o Cloud Infrastructure Entitlement Management (CIEM): Proven ability to manage and govern entitlements, reduce excessive permissions, and implement Just-in-Time (JIT) access within cloud environments.

• Deep technical understanding of at least one major Public Cloud Provider (Azure, Alicloud, or AWS) covering:

o Cloud resource delivery and organization (e.g., Azure Resource Manager, Alicloud Resource Orchestration Service or Terraform).

o Security control delivery and enforcement in cloud native services (e.g., Network Security Groups, WAFs, Cloud Firewall and Cloud SIEM).

• Strong Scripting and Automation Skills: Proficiency in PowerShell, Python, or other relevant languages to automate security operations, compliance monitoring, and incident response within cloud environments (Security-as-Code).

• The ability to train & coach staff in cloud security technical processes, best practices, and the utilization of CNAPP tools.

• Bachelor's degree in a computer-related field or equivalent work experience.

• Demonstrable experience leading teams or projects.

• Several years’ experience working in a large global virtual environment.

• Strong English language skills – written and verbal.

Ideally, you’ll also have

• Cloud administration, engineering, or security-related certifications (Azure, Alicloud, or AWS)

• GSEC/CISSP or other security related generalist certification from ISC2 or GIAC

• Experience in project management, service introduction, and service readiness