Sr. Cloud Security & Compliance Engineer

Employment Type: Perm/Direct Hire

Workplace Type: Hybrid (flexible with the number of days onsite)

Location: Irvine, CA

Industry: Consumer Electronics Manufacturing

Comp: $150-200k, plus a 20% annual bonus, potential sign-on bonus

Responsibilities:

• Design, implement, and manage cloud security solutions and processes across multi-cloud (AWS, Azure, OCI) and hybrid cloud platforms.
• Continuously monitor and assess cloud infrastructure for vulnerabilities, misconfigurations, and suspicious activity.
• Implement and maintain cloud security tools for threat detection, incident response, and access control.
• Develop and enforce cloud security policies and procedures aligned with industry best practices and regulatory requirements.
• Implement, manage, and maintain ISO controls
• Collaborate with development, engineering, and operations teams to integrate security best practices into the DevSecOps lifecycle (CI/CD).
• Lead and participate in cloud security audits and penetration testing to ensure compliance and identify areas for improvement.
• Manage and respond to security incidents according to established procedures.
• Stay up to date on emerging cloud security threats, vulnerabilities, and compliance regulations.
• Communicate effectively with technical and non-technical stakeholders regarding cloud security posture and compliance requirements.
• Work with external auditors to ensure successful completion of security and compliance audits.

Requirements:

• Bachelor's degree or higher in Computer Science, Information Security, or a related technical field.
• Minimum of 5 years of experience in cloud security and/or compliance engineering role.
• Proven experience in implementing and maintaining security and compliance programs.
• Deep working knowledge of security compliance regulations (e.g., ISO 27001, SOC 2, GDPR).
• Prior expeirnece and ability to implement and maintain ISO controls for cloud (AWS, OCI) and privacy compliance.
• Strong understanding of security best practices, including penetration testing methodologies and risk management.
• Understanding of DevSecOps methodologies and best practices
• Experience working with security tools and technologies (e.g., vulnerability scanners, SIEM, IDS/IPS).
• Outstanding communication, collaboration, and problem-solving skills.
• Ability to work independently and manage multiple priorities.

Additional Skills (Preferred):

• Experience in cloud security on AWS, Azure, OCI.
• Experience operating and maintaining Palo Alto Networks VM-Series NGFW.
• Experience in security policy development and management.
• Relevant certifications in Information, Cyber, and Cloud Security (i.e., CISSP, CCSP, GCSA, AWS Certified Security, Azure Security Engineer Associate, ect.)

All qualified applicants will receive consideration for employment without regard to race, color, national origin, age, ancestry, religion, sex, sexual orientation, gender identity, gender expression, marital status, disability, medical condition, genetic information, pregnancy, or military or veteran status. We consider all qualified applicants, including those with criminal histories, in a manner consistent with state and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance.