We are seeking a Security Engineer with a strong specialization in Cloud Security to take ownership of the security posture of our multi-cloud environment. This role focuses specifically on AWS, Huawei Cloud and Alibaba Cloud architectures. You will be responsible for the end-to-end management of security incidents, the maintenance of our existing security tool stack, and the development of automation scripts to streamline operational tasks. We are looking for a hands-on, practical professional who understands how to harden cloud infrastructure, triage security threats effectively, and build code-based solutions to reduce manual effort.
Key Responsibilities
- Act as the primary specialist for cloud infrastructure security, with a focus on AWS, Huawei Cloud and Alibaba Cloud environments.
- Design, implement, and maintain security controls across cloud platforms, including IAM policies, security groups, VPC configurations, WAF, and Anti-DDoS protections.
- Assist during security incidents by responding to and investigating alerts, from initial triage through to containment and resolution.
- Oversee the daily administration of security tools such as SIEM, EDR, and vulnerability scanners, ensuring they are properly configured to generate accurate and actionable alerts.
- Develop scripts using Python, Shell, or similar languages to automate routine tasks, including log analysis, alert triage, and compliance reporting.
- Conduct periodic reviews of cloud environments to identify and correct misconfigurations before they result in security exposure.
- Prepare and maintain incident reports, root cause analyses, and standard operating procedures for ongoing reference by the team.
- Provide documentation and supporting evidence for internal and external security audits.
- Partner with IT, DevOps, and other departments to ensure security policies are properly implemented and adhered to in practice.
