Senior Associate Cloud Security Engineer

Join our team at AMGEN Capability Center Portugal the #1 company in Best Workplaces (201500 employees category) in Portugal in 2024 by the Great Place to Work Institute. With over 500 talented individuals from more than 40 nationalities our Lisbon center thrives at the intersection of innovation excellence and inspiration. This is your opportunity to explore the future of healthcare through technology and digital innovation supporting our mission To Serve Patients.

Senior Associate Cloud Security Engineer

At AMGEN Technology isnt just a support functionits a catalyst for discovery transformation and real-world impact. Here your ideas fuel innovation that improves and saves lives of patients in dire need of our medicines. Are you ready to do meaningful work that matters

LIVE

What you will do

Amgen is seeking a Senior Associate Cloud Security Engineer to join Amgens Cloud Security organization who will be reporting into the Global Information Protection Organization in Amgen and will be based in Lisbon PRT at Amgens new Capability Center.

• Continuously assess cloud configurations using automated compliance and vulnerability management tools to identify misconfigurations and security risks.

• Conduct threat modeling and risk assessments for new cloud solutions and emerging services ensuring alignment with organizational risk appetite and compliance standards.

• Develop and maintain Infrastructure-as-Code (IaC) templates (e.g. Terraform CloudFormation) with embedded security guardrails and policy-as-code enforcement.

• Integrate cloud-native logging and monitoring services (e.g. AWS CloudTrail Azure Monitor GCP Cloud Logging) into centralized SIEM platforms for threat detection and analysis.

• Collaborate with DevOps and application teams to embed security into CI/CD pipelines and implement automated scanning secrets management and dependency validation.

• Respond to cloud-related security incidents conduct forensic investigations and implement remediations to prevent recurrence and strengthen detection mechanisms.

• Develop and maintain technical documentation runbooks and operational standards for cloud security processes controls and procedures.

• This position requires after hours responsibilities and may require some travel.

WIN

What we expect of you

We are all different yet we all use our outstanding contributions to serve patients. The professional we seek is a versatile person with these qualifications.

• Strong command of security foundations e.g. authentication authorization confidentiality integrity and availability.

• Solid understanding of security principles such as the principle of least privilege or economy of mechanism.

• Good working knowledge of cryptography e.g. key management symmetric and asymmetric encryption.

• Comprehensive experience with Amazon AWS understanding of Identity and Access Management Data Protection Secure DevOps Security Operations and other security domains for Cloud.

• Good hands-on experience with AWS foundation services related to compute network storage content delivery administration and security deployment and management automation technologies.

• Experience using AWS Cloud Services (EC2 DynamoDB API Gateway RDS Lambda CloudFront CloudFormation CloudWatch Route 53 etc.).

• Working/Emerging knowledge of Enterprise Cloud Solutions across IaaS PaaS & SaaS. This may include: AWS Azure OpenStack Cloud Foundry Salesforce Microsoft Office 365 Box etc.

• Team-oriented placing priority on successful completion of team goals.

• Self-starter with a high degree of initiative.

• Good verbal and written communication skills.

• AWS Certified Professional or higher.

Basic Qualifications:

• Minimum Education - High School diploma or GED. (Ideally a Bachelor degree on a related career field).

• Ideally /- 4 years of Information Security or Information Technology experience.