As a Cloud Security Engineer and member of the Pure Security Office, you will utilize your strong technical competencies to provide the highest level of implementation capability and technical consultation to IT, product, and shared service engineering teams throughout Pure. 

You will lead to implement provider-agnostic cloud security solutions for monitoring, response vulnerability identification, and mitigation leveraging native cloud security and/or cloud-agnostic tools (i.e. CSPM, CWPP, CNAPP). Collaborate with cloud platform owners within engineering and IT organizations to secure-by-default cloud architecture solutions and implement a process to evaluate infrastructure-as-code, detect errors, and validate submissions prior to commit-to-production to improve cloud security posture. This is an activist role, not an “ivory tower” role.

SHOULD YOU ACCEPT THIS CHALLENGE...

You will become intimately acquainted with how Pure runs its business and provides services to our customers leveraging cloud platforms and on-premise capabilities. Your primary task is to uphold and elevate the security standards of our cloud environments. We seek individuals who are passionate and self-driven experts in cloud security and operations, capable of enhancing our cloud infrastructure's defensive capabilities, offering optimal security practices to our partner teams, and working cross functionally to improve cloud security posture and cloud identity posture.

Our ideal candidate is someone who recognizes the importance of mitigating risks while enabling rapid and secure business operations. You understand that security should be an intrinsic aspect of the tools and processes that engineers utilize on a daily basis. As an experienced engineer, our team will look to you to provide expertise and guidance for our cloud environments and how our products and services run securely within them. 

You are willing to dig into what does and does not work, then provide solutions with leading best practices. You will possess a thorough understanding of security principles, cloud hardening (AWS, Azure, GCP), implementing solutions, networking, and implementation of these solutions, and you must have significant experience in one or many cloud platforms.

Furthermore, you will also be experienced in delivering large scale and complex solutions for projects utilizing all the mentioned offerings and will also be skilled in scripting to enable automation of these processes where appropriate to show others how things can be done.

• Work with the Cloud Security Architects and Cloud Platform owners and operators to design and implement provider-agnostic cloud security solutions for monitoring, response vulnerability identification, and mitigation;
• Perform and support attack surface analysis with the threat intel an incident response teams;
• Collaborate with IT and engineering organizations on secure-by-default cloud architecture solutions - from design to actuating change;
• Implement a process to evaluate infrastructure-as-code, detect errors, and validate cloud security configurations;
• Define and manage central security policies for our cloud infrastructure in collaboration with IT and engineering teams;
• Conducting and leading cloud threat modelling, driving change to leading cloud security best practices, and ensuring cloud platform configurations address security risk;
• Working with different teams for remediation of cloud security vulnerabilities, configurations, and secure alternative patterns;
• Contributing to the development, improvement and operational management of Security Operations, Monitoring and Incident Response practices, processes and solutions relative to our multi-cloud footprint;
• Building up and maintaining capabilities to support privacy requirements for sensitive data in the cloud;
• Assisting in analysis of data, identifying non-conformance trends, generating concise executive summaries, and recommending and actioning secure configuration improvements;
• Operating and executing cloud security solutions across implementation and operations for CSPM/CNAPP and cloud native security capabilities;
• Leading and jointly delivering security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions;
• Implementing security requirements for cloud-based solutions in alignment to cloud infrastructure security standards such as ISO 27000 series, NIST CSF, and CSA CCM.

• A Bachelor of Science Degree in Computer Science, Engineering; or equivalent work experience;
• Strong domain expertise of cloud infrastructure compute, network and storage as well as the cloud control plane;
• Experience running workloads in one or more major cloud service provider (AWS, GCP, or Azure);
• Deep understanding of cloud service architecture and security concepts;
• Ability to define and implement automated metrics to measure service and program effectiveness and consistency;
• Understanding of configuration management, orchestration, and automation tools, such as Terraform, Ansible, Puppet, and cloud native tools in AWS, Azure, and GCP;
• Ability to communicate ideas and proposals concisely, both verbally and written, to executives and engineering leadership;
• Ability to identify, drive remediation, and implement security policies across public and hybrid cloud risks;
• Experience implementing and operating security for cloud native and distributed computing solutions with a principle of “Secure by Design”;
• Understanding of automation solutions and orchestration platforms (CI/CD, DevSecOps) impacted by cloud platforms;
• Knowledge of encryption and tunnelling protocol methods;
• Good understanding of security software implementations and communication (SSL/TLS, HTTPS, PKI, Firewall, etc.);
• Direct experience with common cloud security tools AWS/Azure/GCP native suites, Tenable Cloud, Ermetic, etc.;
• Direct experience with security laws and frameworks such as SOC2, ISO 27001, HIPAA, HITRUST, FedRAMP, PCI-DSS, and others.

Preferred Qualifications:

• A history of working with the security community through volunteering, contributing to open source security-related projects, presenting at conferences, etc. is highly preferred;
• Development experience in one of the following languages is a plus: Python or Go; 
• Experience deploying security configurations and policies at scale using AWS stack sets, Azure Blueprints, Terraform, Service Control Policies, or similar;
• 6+ years of overall technical experience is preferred;
• 4+ years of full-time dedicated experience leading Cloud Security focused roles on delivering security on cloud native, distributed architectural solutions in complex environments; 
• One or more technical security certifications is a plus:
  • CCSP – Certified Cloud Security Professional
  • CISSP – Certified Information Systems Security Professional
  • CSSLP – Certified Secure Software Lifecycle Professional

  • AWS Solution Architect Professional Certification

  • Microsoft Certified: Azure Solutions Architect Expert Certification

  • Google Professional Cloud Architect Certification