Senior Cloud Security Engineer - AWS
Hello! We are looking for a Cloud Security Engineer in Mexico, someone with a strong focus on the AWS platform to lead the design, implementation, and governance of secure cloud-based solutions. This role requires deep technical expertise in AWS services, cloud architecture, and security best practices, along with leadership capabilities to guide a team of engineers and collaborate with cross-functional stakeholders. While this role focuses on AWS, Azure or other cloud platforms is a plus.
Key Responsibilities:
Lead the oversight and governance of secure, scalable, and resilient AWS cloud solutions.
Lead a cross-function team of engineers to achieve cloud security objectives for the AWS platform
Define and enforce security policies, standards, and best practices across AWS environments.
Collaborate with DevSecOps, Security, and Application teams to integrate security into CI/CD pipelines.
Conduct threat modeling, risk assessments, and security reviews for cloud-based applications and infrastructure.
Manage identity and access management (IAM), including Security Groups, RBAC, and conditional access policies.
Oversee the implementation of security monitoring, logging, and alerting using native and industry standard tools.
Stay current with AWS updates, emerging security threats, and compliance requirements (e.g., ISO 27001, NIST, GDPR).
Mentor and guide other engineers and contribute to technical documentation and knowledge sharing.
Required Qualifications:
5+ years of security experience, with at least 2 years in cloud security
Hands-on experience with AWS, including IaaS, PaaS, and SaaS.
Strong understanding of cloud security principles, zero trust architecture, and secure cloud design patterns.
Proficiency in scripting and automation (e.g., PowerShell, Terraform, Cloud Formation).
Experience with AWS-native security tools and services.
Familiarity with regulatory and compliance frameworks (e.g., HIPAA, PCI-DSS, SOC 2).
Desirable Certifications or Relevant Work Experience
AWS Certified Security, Advanced Networking or similar certifications
CISSP, CISM, or other relevant security certifications