Cloud Operations Security Engineer Jobs in Iowa

Required licensures, professional certifications, and/or Board certifications as applicable

Experience with audits and frameworks such as SOX, SOC1/2, HITRUST, NIST

Certified Information Systems Security Professional (CISSP) and or Certified Information Systems Auditor (CISA) certification preferred.

Expertise in modern tooling technologies such as SIEMs, DLPs, NDRs, IPS/IDSs, IAM, SSO

Expertise in modern cloud-based infrastructure such as but not limited to AWS, Azure and Google cloud technologies

Preferred AWS Certified Security Specialty

Experience in threat detection, monitoring, log management, incident response, and forensics.

Experience in IAM, secrets management, encryption technologies, OS security hardening, SaaS services hardening, and container security.

Design and manage security monitoring and threat detection systems for cloud environments.

Develop incident response tools/capabilities and lead forensics investigations.

Support compliance/certification activities and participate in security audits/reviews.

BS/MS in computer science/engineering or equivalent work experience.

Experience using configuration management tools, such as Ansible

Identify vulnerabilities and risks associated to cloud deployments and CI/CD pipelines

Collaborate with Engineers and Product Managers to recommend best security practices and help identify gaps in cloud deployments

Strong experience with Python and Bash scripting

Hands-on experience with infrastructure-as-code technologies, such as Terraform

Hands-on experience deploying and using multiple AWS cloud security products, such as Security Hub, GuardDuty, Inspector and WAF

Develop and maintain logging and monitoring capabilities across our cloud surface, using built-in tools or custom ones

Develop Cyber Threat Intelligence capabilities

Good knowledge of IaaS solutions such as AWS, GCP or Azure

1-2 years of aggregate experience in similar roles (e.g., L1 Support, SOC Analyst)

CSP certifications (check our providers here), where Security or Operations focused are preferred (e.g., AWS: Cloud Practitioner, SysOps Administrator, Certified Security)

General security certifications from entities like ISC2 and GIAC (e.g., SSCP, GCIH)

You will respond in a timely manner (within documented SLA) to configuration, maintenance, incident management, and other requests.

2 Years’ experience securing cloud systems at scale.

Experience in participating in Audits and preparing and providing evidence.

Experience with Linux, Windows and Network Operating Systems required.

Strong working knowledge of Routing and Access Control Devices required.

Knowledge of Azure, AWS and GCP cloud systems and security

Operations, Architecture, DevSecOp, or Network Security experience.

7+ years’ experience in a cyber security, cyber investigations, cyber threat intelligence, or combination of these three roles.

CISSP, AWS Security, AWS Associate or Professional certification

Vanguard is not offering visa sponsorship for this position.

Working with AWS security solutions and various security tools

Mentor junior level analysts and assist when needed.

Experience architecting identity management or device trust mechanisms

Instruments and deploys identity management, device trust, and operating system hardening controls

Experience with modern adversary tradecraft and mitigating controls

Experience developing and implementing defensive controls around Windows, MacOS, Linux and SaaS applications

Experience with AWS or Azure security ecosystem and tooling

Experience conducting security architecture or design reviews around custom business applications

You will respond in a timely manner (within documented SLA) to configuration, maintenance, incident management, and other requests.

2 Years’ experience securing cloud systems at scale.

Experience in participating in Audits and preparing and providing evidence.

Experience with Linux, Windows and Network Operating Systems required.

Strong working knowledge of Routing and Access Control Devices required.

Knowledge of Azure, AWS and GCP cloud systems and security