Cloud Security Engineer

Job Details

What you will do

Are you passionate about security, and working with new technology?

The Cloud Security Engineer will design, develop, implement, and maintain security architectures to protect our systems and data.

Join our team & help us build the future!

How you will do it

• Collaborate on design, implementation and run of security solutions to detect security incidents, vulnerabilities and configurations at the various layers of the cloud infrastructure (virtual machines; containers; network, cloud environment)
  
  
• Drive our existing cloud security stack & security automation stack, including maintenance of the existing environment, developing new solutions architectures, and implementing them to improve our capabilities
  
  
• Cooperate with vendors to identify standard processes and call out potential issues
  
  
• Monitor, detect, and participate in response efforts to advanced persistent threats
  
  
• Work with Intrusion Detection Systems, Intrusion Protection Systems and other network defence security tools
  
  
• Advise on Enterprise anti-virus and malware solutions, virus outbreak management, and differentiation of virus activity from attack patterns
  
  
• Research and develop a proof of concepts on new security technologies relevant to the department
  
  

What we look for

Required

• 5+ years of relevant experience with a major cloud provider (Azure, GCP or AWS)
  
  
• Overview of Kubernetes
  
  
• Involvement with a broad array of security technologies, such as EDR, container security, vulnerability assessment, secure configuration, and firewall
  
  
• Background in Open source and commercial security management tools
  
  
• Intermediate experience in Python or other scripting languages
  
  
• Strong understanding of APIs and building custom integrations using code
  
  

Preferred

• Experience with security tools used in clusters, Linux system security and CI/CD pipelines (Jenkins, Azure DevOps etc.)
  
  
• Skills in Network security methodologies, tactics, techniques, and procedures
  
  
• Knowledge of Network security architecture, understanding of the TCP/IP protocol, and remote access security techniques/products
  
  
• Authority on Regulatory compliance requirements (PCI-DSS, HIPAA, FISMA, SOX) and overview of National Institute of Standards and Technology (NIST)
  
  

Our culture

At Johnson Controls you’ll have the opportunity to work on some of the most exciting projects in today’s market. Our hardworking people empower us, and we believe in being part of a team that is open, collaborative, results-oriented, hardworking and above all fun.

We believe that diversity and inclusion matter and make a difference. By embracing the true value of diversity and inclusion, getting comfortable with having crucial conversations, and valuing different perspectives, we will be one of the most desirable places to work.