Sr. Cloud Security Engineer

Job Description

Our Team

As Discovery portfolio continues to grow – around the world and across platforms – the Global Technology & Operations team is building media technology and IT systems that meet the world class standard for which Discovery is known. Implements and maintains the business systems and technology that are critical for delivering Discovery’s products, while articulating the long-term technology strategy that will enable Discovery’s growing pay-TV, digital terrestrial, free-to-air and online services to reach more audiences on more platforms.

Within our Information Security team, there has never been a busier or more urgent time to obtain the best talent we can for a function so critical to Discovery. In light of the constant threats and attacks occurring in companies across the globe, and across all industries, the Information Security Team at Discovery is a growing group of cyber security professionals, that are using the latest tools and resources to protect the assets from our internal infrastructure to the shows we broadcast across the globe on Discovery Channel, Animal Planet, Discovery ID, TLC, EuroSport and more . From the US to Singapore, India to LA, we are tasked with protecting, training, and implementing the best of the best in tools, resources, monitoring, threat detection, and more.

The Role

The Cloud Security Engineer is a technology and process focused security professional with an emphasis in information security, c loud architecture, cloud infrastructure engineering, cloud incident response, DevSecOps, and cloud related SOAR automation. The Cloud Security Engineer is responsible for assisting the product security teamwork with product stakeholders to develop and implement security solutions to enable the business.

Responsibilities
• Review cloud architecture and advise teams on strong Security Design principles and identification of issues prior to systems or features deployed.

• Provide guidance for security remediation to business and IT partners. Speaking the DevOps and product team’s language by demonstrating real, practical risk and value.

• Develop cloud security solutions to meet incident response and participate in security incident response process as cloud SME.

• Research, innovate, and design cloud first security solutions.

• Partner with DevOps and SRE teams to consult on secure cloud development practices and build cloud security automation into pipelines.

• Develop security related IAC and scripted solutions to integrate security into cloud environments.

• Support SOAR Solutions to solve gaps integrating security into cloud environments.

• Mentor junior members of staff

• Create and maintain documentation as it relates to cloud security designs/configurations, processes, standards and recommendations.

• Collaborate with senior management and department leaders to assess near- and long-term cloud security needs

• Staying current with the latest cloud threat mitigation tools and techniques

Requirements
• Strong understanding of cloud-based infrastructure components with specific understanding of the security risks presented in a decentralized and hybrid environment.

• Comfortable automating processes start to finish and can work closely with cloud solutions engineering and product teams to help integrate security into their existing processes.

• Proficient in at least one scripting language (python, Nodejs, Golang)

• Real-world experience with configuration of log aggregation SIEM solutions through IAC.

• Hands-on experience with some the following:

• Security administration in AWS/GCP/Azure

• CI/CD and DevOps Tooling (Git, Jenkins, CircleCI)

• Infrastructure as code tools (Pulumi, Ansible, CloudFormation, Terraform)

• Command Line usage (Bash, Powershell)

• Network & Infrastructure engineering

• Cloud native security related tools (AWS Guard Duty, AWS WAF, GCP Security Center)

• Elastic Stack

• Docker and Kubernetes

• Excellent verbal and written communication skills with a strong attention to detail

• Remains productive while rapidly switching context

• Thirst for knowledge and constantly driven to stay current with evolving threat landscapes
* Must have the legal right to work in the United States

Nearest Major Market: Washington DC

Jobcode: Reference SBJ-d9zwmk-3-135-217-228-42 in your application.