About the Role:
As a Cloud Security Engineer, you will play a pivotal role in ensuring the security and integrity of our cloud infrastructure. This includes managing cloud security tools (CNAPP/CSPM), conducting security reviews of cloud accounts and projects, generating proactive guidance, reviewing and creating IaC/policy as code templates, and participating in cloud design discussions. You will also contribute to the development and implementation of cloud security controls, create integrations and automations for cloud security detection and response actions, and collaborate with various stakeholders across the organization.
Your Key Responsibilities:
- Manage cloud security tools (CNAPP/CSPM) and implement cloud security controls in a multi-cloud environment (AWS and Azure).
- Conduct security reviews of cloud accounts and projects, generate proactive guidance, and participate in cloud design discussions.
- Review IaC/policy as code template proposals and provide recommendations for secure cloud deployments.
- Develop integrations and automations for cloud security detection and response actions to support the Cyber Defense Operations.
- Partner with cloud foundation teams, Cyber Defense Operations, Tech@Lilly, business areas, and suppliers to ensure secure cloud adoption and operations.
- Perform threat analysis and modeling to enable business and technical partners to deliver secure solutions integrated with the SecOps lifecycle.
- Apply threat modeling and analysis frameworks such as MITRE ATT&CK and STRIDE (or STRIDE-LM) in security practices.
- Maintain and expand technical knowledge across cloud security concepts and technologies, driving knowledge growth across security domains.
Your Qualifications:
- Bachelor's degree in Cyber Security, Computer Science, Information Technology, or related field
- 2-6 years of demonstrated experience in cloud architecture and engineering, with a focus on AWS or Azure