The Role
Manage cloud security and compliance programs across SOC 2, ISO 27001, HIPAA, GDPR, and related frameworks. Assess AWS environments, coordinate audits and penetration tests, conduct risk and vulnerability assessments, administer security tools, track remediation, maintain policies and runbooks, deliver security awareness activities, validate controls, and support incident response and business continuity exercises.
Summary Generated by Built In
What Ibexlabs Does
Ibexlabs is one of the leading software development and service companies. We build cloud native B2B SaaS software helping customers in their cloud transformation journey. We are rapidly growing and looking to hire smart people who can continue fueling our growth and be part of our success journey.
Position Details
Job Purpose
We are looking for a Cloud Security Engineer (with 5 years of experience in a public cloud environment), who is passionate about security design, architecture and implementation and learning new technologies and growing her/himself in his/her career.
As a Security Engineer, you will help guide our customers with the assessment through AWS Well Architected Framework of their public cloud infra with remediation and recommendation. You will also help our customers to make them SOC2 (Service Organisation Control) certified including policies/procedures creation and guiding and mentoring the rest of the team members.
Responsibilities and Requirements
- Manage and maintain compliance programs across frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, Cyber Essentials and related regulatory standards using compliance automation platforms including Drata and Sprinto.
- Coordinate end-to-end audit activities, including evidence collection, auditor coordination, remediation tracking, and compliance readiness management.
- Conduct enterprise risk assessments, vendor security assessments (VASQ), and vulnerability management activities to identify and mitigate security and compliance risks.
- Administer and monitor security tools such as JumpCloud and Trend Micro, including access management, endpoint security monitoring, and incident response support.
- Perform vulnerability assessments and remediation tracking using tools such as AWS Inspector, Nmap, Detectify, and ZAP OWASP.
- Coordinate penetration testing engagements, track remediation activities, and support security improvement initiatives across customer and internal environments.
- Develop, review, and maintain security policies, procedures, runbooks, and compliance documentation aligned with industry standards and organizational requirements.
- Execute periodic security awareness training, phishing simulation campaigns, incident response exercises, and business continuity/disaster recovery testing.
- Conduct periodic administrative access reviews, log monitoring, and security control validations to ensure compliance with internal security standards and regulatory requirements.
- Collaborate with cross-functional teams, auditors, vendors, and stakeholders to support security operations, compliance initiatives, and continuous improvement activities.
Skills Required
- Five years of experience in a public cloud environment
- Experience with cloud security design, architecture, and implementation
- Experience assessing public cloud infrastructure using the AWS Well-Architected Framework
- Experience managing compliance programs and audit activities for frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, or Cyber Essentials
- Experience with compliance automation platforms such as Drata and Sprinto
- Experience conducting risk assessments, vendor security assessments, and vulnerability management
- Experience administering security and endpoint monitoring tools such as JumpCloud and Trend Micro
- Experience with vulnerability assessment tools including AWS Inspector, Nmap, Detectify, and OWASP ZAP
- Experience coordinating penetration testing and remediation tracking
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Ibexlabs is an AWS Premier Tier Services Partner providing enterprise cloud, data, and artificial intelligence consulting and managed services. The company designs, deploys, and operates secure, compliant AWS solutions, supporting cloud transformation, migration and modernization, data strategy, AI implementation, cybersecurity, and ongoing infrastructure operations. It serves organizations ranging from growing businesses to regulated enterprises with scalable, production-ready technology solutions at scale.
