Senior Cloud Security Engineer

Job description

As a Senior Cloud Security Engineer, you will be responsible for designing, implementing, and maintaining cloud security solutions across multiple cloud platforms (AWS, Azure, GCP). You will be a part of the Product Security and working with the DevOps, Infrastructure Engineers, Cloud Infrastructure, and SRE teams to ensure our cloud environments meet industry best practices by implementing secure by design patterns. The ideal candidate will have deep expertise in cloud security, automation, and a passion for staying current with emerging threats and technologies. Key Responsibilities Design and implement cloud security controls and best practices across AWS, Azure, and GCP Engineer and maintain cloud security solutions to prevent and protect against threats Architect and deploy security solutions including WAF, DDoS protection, and identity management Leverage automation to audit and maintain cloud and cloud-native security Secure containerized workloads and Kubernetes clusters using best practices and industry-standard tools Required Qualifications Experience in cloud security, cybersecurity, or related field Hands-on experience with AWS, Azure, or GCP security services Understanding of cloud security principles and best practices Experience with infrastructure-as-code tools (Terraform, CloudFormation, ARM templates) Proficiency in scripting languages (Python, PowerShell, Bash) Experience with container security (Docker, Kubernetes, Pod Security Standards) Knowledge of identity and access management (IAM, SAML, OAuth, OIDC) Experience with vulnerability assessment and penetration testing Understanding of threat modeling and risk assessment methodologies Preferred Qualifications Cloud security certifications (AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer) Experience with multiple cloud platforms (AWS, Azure, GCP) Experience with security automation and orchestration platforms Experience with creating custom security tooling to automate tasks Experience with secrets management solutions (HashiCorp Vault, AWS Secrets Manager) Experience of policy-as-code engines (OPA, Kyverno) Knowledge of AI and its application in security Tricentis Core Values: Knowing what we need to achieve and how to achieve it is important. Tricentis core values define our ways of working and the behaviours we model that create an enjoyable and successful Tricentis life. Demonstrate Self-Awareness: Own your strengths and limitations. Finish What We Start: Do what we say we are going to do. Move Fast: Create momentum and efficiency. Run Towards Change: Challenge the status quo. Serve Our Customers & Communities: Create a positive experience with each interaction. Solve Problems Together: We win or lose as one team. Think Big & Believe: Set extraordinary goals and believe you can achieve them. You can look forward to: Flexible working schedule (no core hours) Learning and career growth opportunities 25 days of paid time off 3 Sick Days 2 days of paid Volunteering Leave per year to get involved in your local community or in a cause that matters to you Hybrid work environment with home-office allowance Meal allowance Pension Contribution Life & Disability Insurance Paid Sickness Leave A team of passionate professionals who are experts in their fields Events for employees to learn, celebrate, and socialize (training sessions, hackathons, parties, sports events, board game gatherings, BBQs), and much more About Tricentis: Tricentis is a software company officially founded in 2007, with primary focus on software quality assurance. Whether exploratory or automated, functional or performance, API or UI, as well as mainframes or custom applications or packaged applications, or cloud-native applications - our comprehensive suite of specialized Continuous Testing tools makes DevOps real by giving our clients the confidence to release on demand. Tricentis has more than 1500 employees working in across over 20 global offices in US, EMEA, APAC serving over 2100 customers, and currently expanding our R&D centers to two new locations in the Czech Republic – Prague and Brno - Hybrid office environment. Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law. Tricentis is proud to be an equal opportunity workplace. Qualified applicants will receive consideration for employment without regard to race, color, ethnicity, gender, religious affiliation, age, sexual orientation, socioeconomic status, or physical and mental disability and other statuses protected by law. Global Sanctions Compliance We comply with all applicable global sanctions and export control laws. Candidates must not be listed on any government restricted party lists (including OFAC SDN List and U.S. Commerce Department restricted lists) and must certify that their employment would not violate any sanctions or export control regulations. Candidates must notify us of any changes to their status during the application process or subsequent employment.