Cloud Security Engineer [Remote]
ABOUT US:
Braintrust is the only network that gives in-demand talent all the freedom of freelance with all the benefits, community and stability of a full-time role. As the first decentralized talent network, our revolutionary Web3 model ensures the community that relies on Braintrust to find work are the same people who own and build it through the blockchain token, BTRST. So unlike other marketplaces that take 20% to 50% of talent earnings, Braintrust allows talent to keep 100% of earnings and to vote on key changes to improve the network. Braintrust is working to change the way freelance works – for good.
- JOB TYPE: Freelance, Contract Position (no agencies/C2C - see notes below)
- LOCATION: United States only - Remote (TimeZone: PST/CIST | Partial overlap)
- HOURLY RANGE: Our client is looking to pay $110-$140/hr
- ESTIMATED DURATION: 40hr/week - Long-term
THE OPPORTUNITY
What you’ll be working on
Qualities
- Great analytical and critical thinking skills
- Ability to interact with personnel across all business units, customers, and third parties
- Good written and verbal communication skills – Post-secondary level of English proficiency is preferred
- Passionately driven and eager to carry out task while working independently and on a team
Requirements
Tasks and Responsibilities
- Serves as the lead for the deployment and implementation of public, private, and hybrid cloud security controls within on premise and remote virtualization environments. (Azure, VMWare, Nutanix, AWS, GCP, etc.)
- Act as a subject matter expert in knowledge of Microsoft Azure cloud services security features such as Azure Security Center, Windows Defender, Compliance Center, Sentinel, and Microsoft 365 workloads.
- Work as a member of the Security Engineering team to ensure sensors and systems are best utilized for accomplishing security program objectives in the cloud.
- Demonstrate effective risk management skills to include appropriately identifying and mitigating weaknesses in cloud resources as needed.
- Enhance procedures and processes for designing, testing, and maintaining security controls across cloud networks, systems, and applications shared by various teams.
- Provide leadership and guidance on cloud solutions to personnel across both operational and strategic levels, as well as third party contractors and vendors supporting the IT department and other business units.
- Collaborate with the IT department and other teams to improve asset management and accountability for cloud hosted infrastructure, controls, and integrations.
- Operate as a member of the enterprise Information Security Organization and also Enterprise Risk Management teams in support of overall protection and assurance of data and technology.
- Communicate cloud concepts to both technical and non-technical audiences across different units within the organization for improving cloud governance.
- Adequately produce security controls in line with industry standards and security frameworks to meet regulatory compliance needs (e.g. PCI-DSS, SWIFT, NIST, and ISO).
- Participate in Application Development (AppDev) and DevOps projects and initiatives to implement security controls and procedures into the development lifecycle (DevSecOps, SSDLC, CI/CD, etc.).
- Support other cloud security activities across various cloud service provider technologies in the environment, to include security assessments, testing, and evaluations (e.g. Amazon AWS, Google Cloud Platform, IBM, and Oracle).
Required
- Bachelors or master's degree in computer science, information security, information technology, or a related field.
- Min. 3-5 years’ experience working as a cloud security engineer or similar role leading the development and implementation of cloud security controls.
- Hands-on experience with documenting and reporting on public, private, and hybrid cloud networks, systems, applications, and resource security.
- Experience with popular information security frameworks, such as International Organization for Standardization (ISO) 27001, National Institute of Standards and Technology (NIST), CSI CSC 20, etc.
- In-depth knowledge and understanding of information security risk management concepts and principles.
- Ability to translate Information Security policies and procedures into language that a business and/or technical person can understand and ability to effectively communicate with both non-technical and technical people
- Strong problem solving with the ability to methodically and objectively analyze and resolve Information Security challenges across multiple business teams.
Preferred
- Experience working in Information Security practices within the Financial Services industries and sectors to include banking, insurance, asset management, lending, and other sectors.
- Working knowledge and comprehension of common Financial Services regulatory bodies and frameworks (FFIEC, SOX, GLBA, PCI-DSS, NYDFS, etc.)
- Recognized industry security certifications and credentials specific to cloud security and risk management (CISSP, CCSP, CISM, CRISC, CISA, GIAC/SANS, Cloud Security Alliance, AWS/Azure, etc.)
- Advanced demonstrated proficiency in deploying Infrastructure-as-a-Service, Platform-as-a-Service, Software-as-a-Service, and other on-demand cloud computing solutions. (Azure Blueprints, Azure Resource Management, PowerShell/Bash, and other DevOps/Infrastructure-as-Code tools.)
- Strong communication skills across business units while working in remote operations.
Documentation and diagram experience using common SDLC or security tools (Visio, VisualParadigm, Microsoft Project, etc.)
Apply Now!
#PL-BT
ABOUT THE HIRING PROCESS:
Qualified candidates will be invited to do a screening interview with the Braintrust staff. We will answer your questions about the project, and our platform. If we determine it is the right fit for both parties, we'll invite you to join the platform and create a profile to apply directly for this project.
C2C Candidates: This role is not available to C2C candidates working with an agency. If you are a professional contractor who has created an LLC/corp around their consulting practice, this is well aligned with Braintrust and we’d welcome your application.
Braintrust values the multitude of talents and perspectives that a diverse workforce brings. All qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status.