Cloud Security Engineer

Description

The company is a luxury group with several houses making jewelry, watches and high-end accessories. Each house keeps its own tradition of style, quality and craftsmanship, and the group works to protect that heritage while designing new products that fit each house's values.

The role sits in the Governance & Architecture team inside the Cloud & DevOps Services department.

You help strengthen security across cloud and DevOps work so that teams can build and ship in the cloud safely and efficiently. You help design, put in place and keep improving security frameworks, and your skill in secure cloud and DevOps practices helps development and operations teams work together.

Responsibilities

• Help build and improve a full set of tools and processes for cloud security and DevSecOps, covering people, process and technology. Areas include CSPM, CWP, SAST, secret detection, policy as code and reviews of Infrastructure as Code modules.
• Give hands-on advice to engineering and project teams on putting security controls, guidelines and best practices into practice.
• Drive closer work between product teams, cybersecurity teams and compliance functions. Help measure risk and set control objectives and activities that protect cloud workloads.
• Take part in cloud security governance: sit on committees, build dashboards with linked KPIs, and promote good practice to other teams.
• Work on your own initiative. Understand functional and technical requirements, spot gaps and propose improvements.

Requirements

• At least 2-3 years working in a cloud environment, with a record of building and delivering effective cloud security solutions and handling security problems.
• Deep knowledge of cloud provider services, mainly AWS, Alibaba Cloud or GCP, plus one or more cloud certifications such as AWS Certified Security.
• Experience defining and managing security across the software development lifecycle (SDLC) is a plus.
• Familiarity with the OWASP Testing Guide v3 / 4 and the OWASP Top 10.
• Experience with data architecture and protection, and with reducing the risk of data exfiltration for sensitive data (PII).
• Working knowledge of container technologies such as Kubernetes and Anthos.
• Strong written and verbal communication, with the ability to explain technical ideas in business terms.
• Fluent English is required. French is a plus.

Conditions

You join a young, dynamic team and take part in the company's cloud transformation.

You work with stakeholders across many houses and markets.

Equal opportunity statement not provided in the posting.

Benefits

• Support for personal development, including training, conferences and certifications.
• Chances to attend conferences and summits on cloud provider technologies and to advise on market technologies.
• You work with an open-minded, self-learning team on a modern technical stack to deliver value to the business.