Transaction Network Services (TNS)

Cloud Security Engineer

Transaction Network Services (TNS)

full-time

Posted on:

Origin:  • 🇺🇸 United States • Kansas, Pennsylvania, Utah, Washington

Visit company website
✨ AI Apply
Manual Apply

Salary

💰 $126,000 - $154,000 per year

Job Level

Mid-LevelSenior

Tech Stack

AWSAzureCloudCyber SecurityLinux

About the role

  • Experienced and motivated Cloud Security Engineer to help TNS develop and mature the security of our growing cloud footprint. The ideal candidate will have experience on multiple cloud environments including unified monitoring via cloud application security broker (CASB) and SIEM on behalf of a cybersecurity program. Serving as a Subject Matter Expert in the configuration and operation of the security consoles and controls within the environment. Providing analysis of outputs and recommendations for improving overall security posture. Finally, developing technical documentation supporting the architecture discussions and leadership decision. Responsibilities include driving development and adoption of cloud security standards, best practices, and technologies within Enterprise IT infrastructure at TNS. Liaising and communicating security-related issues with internal business stakeholders. Developing, enhancing, and documenting security architecture, security policies, patterns, procedures, guidelines, and standards requiring cloud-based solutions. Implementing security controls to comply with industry best practices and various regulatory controls – PCI. Working with other teams to maintain security compliance for PCI or other security standards. Providing security recommendations and expertise on new services or for migrating applications. Conducting initial triage assessments of audit findings from audit or testing. Reviewing products and making recommendations to improve the security posture. Engaging with other internal and external groups to get and share information to improve processes and security posture. Proactively improving the security posture of cloud-based environments with Cloud Service Provider(CSP) services, Compliance as Code and automation. Reviewing reports from third-party penetration test results and document alignment to cloud provider guidelines and tools. Define, document, and share cloud provider incident response methodology that guides detection and response to cloud-based security incidents including defining first responder steps and incident manager role. Experience reviewing system and application logs (e.g., web or mail server logs), either to investigate security issues or complex operational issues. Verify cloud logging capabilities to establish accountability for events that occur in the cloud environment Experience deploying physical, virtual and cloud hosted enterprise applications on MS Windows and/or Linux OS.

Requirements

  • English and Portuguese (A Plus) communication abilities
  • Understanding of how cloud components work and integrate with each other for a given platform
  • Implementation and use of Vulnerability Management and Dynamic Application Security Testing (DAST) Tools (Qualys, Tenable)
  • Assessment Tools for Cloud Security (Pacu, Aqua security, Cloudsploit and other tools)
  • Understanding controls supporting Zero Trust methodology
  • Understanding of cryptography and encryption in the cloud
  • Knowledge of Center for Internet Security (CIS) Controls for Cloud Critical Security
  • Knowledge of industry best practices for security especially in the field of anything cloud, software as a service, and infrastructure as a service
  • Bachelor's degree or higher in Computer Science, in an information technology discipline or a related technical discipline; or the equivalent combination of education, professional training or IT work experience
  • Desired - Certificate of Cloud Security Knowledge (CCSK), CompTIA Cloud+, Certified Cloud Security Professional (CCSP), Azure Security Engineer Associate and/or AWS Certified Security