Senior Cloud Security Engineer
Storm3 - South San Francisco, CA
Apply NowJob Description
Our client is an innovative biotechnology company leveraging AI-driven drug discovery to advance cancer research and treatment. Their platform integrates high-throughput screening, machine learning, and computational biology to accelerate the development of life-saving therapies.As part of the security team, this role is critical in safeguarding cloud infrastructure, AI-driven research, and highly sensitive biomedical data. They are looking for a Cloud Security Engineer to strengthen security controls, enforce Zero Trust Architecture, and automate security processes within a dynamic biotech environment.The OpportunityThis role will be responsible for securing AWS cloud environments, ensuring compliance with security best practices, and collaborating with teams across DevOps, AI research, and security operations. The ideal candidate will have hands-on experience with cloud security, automation, and compliance frameworks, with a deep understanding of modern security threats and mitigation strategies.Key Responsibilities✅ Cloud Security & Infrastructure ProtectionSecure AWS environments, including IAM, VPCs, S3, EC2, Lambda, and Kubernetes.Implement and maintain Zero Trust Architecture, enforcing segmentation and access controls.Manage encryption, key management, and security vaults with AWS KMS.✅ Threat Detection & Incident ResponseMonitor security platforms such as Lacework, AWS Security Hub, and Sumo Logic for potential threats.Conduct penetration testing and vulnerability scanning to proactively identify risks.Develop and execute incident response protocols to mitigate security breaches.✅ Security Automation & DevSecOpsIntegrate security controls into CI/CD pipelines to enforce infrastructure-as-code (IaC) security best practices.Automate security workflows using Terraform, AWS CLI, Python, Bash, or Go.Secure containers and Kubernetes environments (EKS, Docker) to strengthen cloud-native security.✅ Compliance & GovernanceEnsure compliance with ISO 27001, NIST, SOC 2, and other industry security frameworks.Partner with external security vendors and Managed SOC teams to conduct audits and assessments.Implement SSO, Zero Trust security models, and network segmentation strategies.Who You Are5+ years of experience in cloud security, with a strong focus on AWS security.Strong knowledge of IAM, VPC security, encryption practices, and network segmentation.Hands-on experience with threat detection tools such as Lacework, AWS Security Hub, and Sumo Logic.Deep understanding of Zero Trust Architecture and modern cloud security frameworks.Expertise in DevSecOps workflows, infrastructure-as-code security (Terraform, CloudFormation, Ansible, or Pulumi).Proficiency in security automation scripting (Python, Bash, Go, AWS CLI).Familiarity with compliance frameworks such as ISO 27001, NIST, and SOC 2.Preferred CertificationsAWS Certified Security - SpecialtyPalo Alto Networks Certified Cybersecurity Associate (PCCSA) or Professional (PCNSA)Cisco Certified CyberOps Associate or ProfessionalBonus SkillsExperience in biotech, healthcare, or AI-driven environments.Familiarity with AI security risks and automation vulnerabilities.Experience securing high-performance computing (HPC) environments for AI workloads.Container security expertise (Kubernetes, Docker, AWS EKS).
Created: 2025-02-22