Cloud Security Engineer
Share
Job Location:
Chicago, IL - USA
Monthly Salary:
$ 127000 - 147000
Posted on:
30+ days ago
Vacancies:
1 Vacancy
Job Summary
Summary
The Cloud Security Engineer is primarily responsible for designing implementing and supporting secure Microsoft Azure cloud environments for the Firm. This individual will ensure that cloud-based development platforms APIs and applications follow best practices regulatory requirements and Firm-specific policies to protect sensitive Client and Firm data. The Cloud Security Engineer acts as a subject matter expert collaborating with cross-functional teams to establish secure coding deployment and data management processes. This role also participates in security incident response activities related to cloud infrastructure and applications ensuring timely detection containment and remediation of potential threats. This person will also contribute to our overall Cloud Security Strategy.
Duties and Responsibilities
- Design configure and maintain secure Microsoft Azure environments aligned with industry best practices and Firm policies. Familiarity with AWS and Google cloud needed as well.
- Implement and manage cloud security controls including identity and access management network segmentation encryption and security monitoring.
- Protect sensitive data stored or processed in the cloud through encryption access controls and secure key management.
- Develop enforce and maintain secure API management processes including authentication authorization rate limiting and auditing.
- Build and maintain secure DevSecOps pipelines ensuring that only reviewed tested and approved code is promoted to production.
- Integrate automated security testing and vulnerability scanning into Continuous Integration / Continuous Delivery (CI/CD) workflows.
- Collaborate with application developers infrastructure engineers and security teams to ensure secure design and deployment practices.
- Create and maintain documentation standards and procedures for cloud security configurations incident handling and code promotion processes.
- Monitor and respond to security alerts from cloud-native tools and third-party monitoring solutions.
- Participate in risk assessments audits and compliance efforts related to cloud security (e.g. ISO 27001 GDPR CCPA).
- Stay current with emerging cloud security threats vulnerabilities and evolving best practices especially within the Microsoft Azure ecosystem.
Salaries vary by location and are based on numerous factors including but not limited to the relevant market skills experience and education of the selected candidate. If an estimated salary range for this role is available it will be provided in our Target Salary Range section. Our compensation package also includes bonus eligibility and a comprehensive benefits program. Benefits information can be found at Salary Range To perform this job successfully an individual must be able to perform the Duties and Responsibilities (Duties) above satisfactorily and meet the requirements below. The requirements listed below are representative of the minimum knowledge skill and/or ability required. Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of the job. If you need such an accommodation please email (current employees should contact Human Resources). Education and/or Experience: Required: Preferred: Other Skills and Abilities: The following will also be required of the successful candidate: Sidley Austin LLP is an Equal Opportunity Employer #LI-Hybrid #LI-HM1Qualifications
Key Skills
- Splunk
- IDS
- Network security
- Computer Networking
- Identity & Access Management
- PKI
- PCI
- NIST Standards
- Security System Experience
- Information Security
- Encryption
- Siem
About Company
Sidley is a global law firm, collaborating across disciplines and borders to help clients in more than 70 countries achieve business objectives.
