As Cloud Security Engineer, you’ll provide cybersecurity expertise in the analysis, assessment, development, evaluation, and management of security solutions and architecture to secure applications, operating systems, databases, and networks. You will also assist in the development of cybersecurity requirements, conduct security risk assessments, evaluate security services and technologies, and review and document information security policies and procedures as well as provide monitoring and oversight for alerts in this environment.

What you’ll do:

• Serve as the subject matter expert on cloud security for MyHeritage
• Implement new cloud security products as well as manage and maintain them
• Develop standards, policies, and procedures as well as best practices documentation
• Participate in efforts that tailor the company’s security policies and standards for use in cloud environments
• Translate security and technical requirements into business requirements, and communicate security risks to different audiences ranging from business leaders to engineers
• Propose and/or design technical solutions that include creating prototypes and proofs-of-concept while maintaining a security mindset
• Lead and influence multi-disciplinary teams in implementing and operating cybersecurity controls
• Work closely with application developers and database administrators to deliver creative solutions to complex technology challenges and business requirements
• Provides info security architecture and systems engineering consulting to other IT and business teams
• Automate security controls, data, and processes to provide better metrics and operational support
• Utilize cloud-based APIs when appropriate to write network/system-level tools for securing cloud environments
• Stay current on emerging security threats, vulnerabilities, and controls
• Identify and implement new security technologies and best practices into the MyHeritage cloud
• Evaluate new technologies against established requirements and validate the security of these technologies
• Create technical- and managerial-level reports and risk assessments for cloud-based applications and infrastructure
• Identify processes/procedures for how to handle a cloud security event, including forensic isolation and mitigation with the SOC team.
• Support the monitoring and maintenance of network security suite of tools
• Identify new security threats by conducting continual monitoring, penetration testing, vulnerability assessments, and log analysis

What you bring:

• Bachelor’s degree in related business or technical areas, or an equivalency of education and work experience
• Minimum of 5–7 years of IT security and/or security engineering experience
• 5–7 years related experience in computer security, with a proven focus on cloud security
• Clear passion for cloud security and cloud technologies
• Must have experience with virtualization (cloud or non-cloud)
• Expert knowledge of cloud infrastructure, security architecture, and standards

• Deep technical knowledge of Amazon Web Services
• Able to demonstrate clear understanding of current threats to cloud infrastructure and/or IT infrastructures at technical and managerial levels
• Experience with web-based applications or web-services
• Experience in designing and implementing standards, specifications, and procedures
• Demonstrated ability to take initiative and accountability for achieving results
• Strong interpersonal, oral, and written communication skills
• Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
• Skilled in discussing complex security issues in understandable business terms
• Very detailed knowledge of system security vulnerabilities and remediation techniques
• Security certification desired (e.g., CISSP, GIAC, CEH, etc)