Description:
Brunswick is in search of a Cloud Security Engineer to join the Information Security team. The Cloud Security Engineer position is responsible for designing, implementing, and managing security measures to protect Brunswick’s multi-cloud environments (AWS, Azure, Google Cloud, etc.). To ensure success within this position, the individual selected will need to be motivated, detail oriented, security focused, able to adapt to change and drive information security issues to resolution. This individual will also be working with multiple technology teams that will encourage knowledge sharing and continual improvement of various skillsets. The ideal candidate will be able to identify and mitigate security risks while ensuring compliance with industry standards and best practices.
At Brunswick, we have passion for our work and a distinct ability to deliver.
Essential Functions:
- Security Architecture Implementation: Put into effect security architecture and strategies for multi-cloud environments, ensuring robust protection against threats and vulnerabilities.
- Risk Assessment: Conduct regular risk assessments and vulnerability analyses to identify potential security issues. Implement remediation strategies and track progress.
- Security Tools & Technologies: Evaluate, implement, and manage security tools and technologies across multiple cloud platforms, including firewalls, intrusion detection/prevention systems, and encryption solutions.
- Compliance & Governance: Ensure cloud environments comply with relevant regulatory requirements (e.g., GDPR, HIPAA, SOC 2) and internal security policies. Develop and maintain documentation for compliance audits.
- Incident Response: Develop and maintain incident response plans for cloud environments. Lead investigations and remediation efforts in the event of security incidents or breaches.
- Automation & Scripting: Utilize automation tools and scripting languages (e.g., Python, Bash) to enhance security operations and incident response processes.
- Collaboration & Training: Work with DevOps, IT, and development teams to integrate security into the software development lifecycle. Provide training and guidance on cloud security best practices.
- Monitoring & Reporting: Set up and manage security monitoring and alerting systems. Provide regular reports on security posture and incidents to senior management.
Diversity of thought and experiences is fundamental when imagining the unimaginable. Certain skillsets/experiences are necessary; however, others can be developed along the way.
- Education: Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field. Advanced degree or relevant certifications (e.g., CISSP, CISM, CCSP) are a plus.
- Experience: Minimum of 3-5 years of experience in public cloud infrastructure & cloud security, with a strong focus on multi-cloud environments (AWS, Azure, Google Cloud Platform, Oracle Cloud Infrastructure).
- Technical Skills:
- Thorough understanding of cloud and network security
- Experience using CI/CD pipelines for change management and automated security testing & familiarity with DevSecOps principles and practices.
- Proficiency in cloud security best practices and tools
- Proficiency in log management and/or correlation systems
- Experience with security frameworks (e.g., NIST, ISO 27001).
- Strong understanding of network security, identity, and access management (IAM), and data protection.
- Hands-on experience with security automation and scripting.
- Experience deploying and customizing security tools such as vulnerability scanners, static analyzers, IDS/IPS, firewalls, and endpoint security monitoring
- Soft Skills:
- Excellent problem-solving and analytical skills.
- Effective communication and collaboration abilities.
- Ability to work independently and as part of a team in a fast-paced environment.