Black Duck Software, Inc.

Senior Cloud Security Engineer

Black Duck Software, Inc.
Apply
4 months ago
Belfast, United KingdomSenior / Staff+

Responsibilities

  • Develop and maintain cloud security standards, policies, and procedures.
  • Design, build, and operate security controls for SaaS services on AWS and GCP.
  • Continuously monitor cloud resources to identify security risks and drive remediation.
  • Conduct vulnerability assessments and ensure compliance with security controls.
  • Automate cloud security controls and workflows using Python and Bash.
  • Enhance the cloud security tooling ecosystem for monitoring and detection.
  • Integrate security controls into CI/CD pipelines to advance DevSecOps.
  • Lead incident response and forensic analysis for cloud security incidents.
  • Influence cloud security architecture and strategy across teams.
  • Communicate security risks and recommendations to senior stakeholders.
  • Coach less experienced engineers and lead security reviews.
  • Negotiate and build consensus across various teams and partners.

Requirements

  • 5–7+ years of experience in information security with a focus on cloud security.
  • Minimum 3 years of hands-on experience securing cloud environments.
  • Bachelor’s degree in Information Security, Computer Science, or related field.
  • Specialized knowledge of cloud security principles and architectures.
  • Hands-on experience with containerized and Kubernetes-based platforms.
  • Strong experience with Python and/or Bash for security automation.
  • Proficiency with infrastructure as code technologies like Terraform.
  • Proven ability to lead projects and coordinate cross-functional teams.
Black Duck Software, Inc.

About Black Duck Software, Inc.

1,001-5,000 employees

Black Duck Software builds application security tools and services for engineering and security teams, including SAST, SCA, and DAST to find vulnerabilities and licensing/compliance risks in proprietary and open-source code. It offers enterprise software plus on-demand audits and M&A due diligence, delivered in the cloud or on premises. The company is privately held and headquartered in Burlington, Massachusetts.

Contact me