Foodics is hiring a Senior Cloud Security Engineer

Foodics is looking for a Senior Cloud Security Engineer to support the day-to-day security operations of our cloud environments and internal infrastructure. You'll act as a key member of the Cloud Security Operations function, focusing on monitoring, operational support, incident handling, and maintaining secure configurations to ensure our systems remain compliant, resilient, and protected.

What You'll Do

• Drive adoption of zero-trust, least privilege, and defense-in-depth principles.
• Drive secure baseline configurations for compute, storage, databases, and serverless.
• Proactively participate in threat landscape monitoring using various threat intelligence and OSINT tools.
• Work closely with the Cybersecurity team to perform attack surface management, vulnerability management, and execute patch management procedures.
• Continuously assess and reduce identity risk (privilege creep, service identities) using PAM and IAM platforms.
• Conduct periodic review of security logs from SIEM, WAF, and CloudTrail, collaborating with outsourced MDR vendor for incident management and reporting.
• Manage WAF, DDoS protection, and secure ingress/egress controls.
• Work closely with Application Security/QA in analyzing code-level security findings using SAST/DAST tools and follow up according to remediation plans.
• Manage cloud KMS, key lifecycle, and secrets management solutions.
• Collaborate with Cloud Engineers and SRE teams to define and enforce cloud guardrails using native policies and controls.
• Define and maintain cloud security reference architectures, design patterns, and document incident response playbooks.
• Support audits and security assessments such as ISO27001, NCA ECC, SAMA CSF, PCI-DSS, SOC 2, and GDPR.

What We're Looking For

• Strong expertise in IAM, network security, and cloud-native security controls.
• Solid understanding of containers, Kubernetes, and cloud-native workloads.
• Experience working with DevSecOps practices and culture.
• Hands-on knowledge in deployment of Cloud or VM-firewalls, AWS or Cloudflare WAF configuration, DDoS services, SSL-VPN/IPSEC troubleshooting and support.
• Familiarity in securing EC2 instances, S3 buckets, source code repo (GitHub), container registries, containers, and Kubernetes clusters.
• Proven incident response experience in cloud environments.
• Able to manage existing services for Cloudflare and AWS CloudFront.
• Able to integrate or ingest cloud logs and signals into SIEM/SOAR platforms.
• Strong CLI and scripting automation using Python, Bash, PowerShell, Go, PHP, and cloud-native CLI.
• Able to align with CSPM, CWPP, and CNAPP platforms.

Nice to Have

• Bachelor’s degree in Computer Science, Engineering, or Cybersecurity.
• 6-7 years combined experience in Information Security, Cybersecurity Analyst/SOC, Cloud Security & Incident Response roles.
• Industry cloud security certifications: AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate (AZ-500), CompTIA Security+ or Cloud+, CSA Certificate of Cloud Security Knowledge (CCSK), GIAC Public Cloud Security (GPCS), (ISC)² Certified Cloud Security Professional (CCSP).
• Experience managing complex IAM deployments such as multi-cloud environments or hybrid identities.
• Experience in securing multi-cloud for a Fintech or Financial institution.

Technical Stack

• IAM, PAM, SIEM, WAF, CloudTrail, SAST, DAST, KMS
• Kubernetes, AWS, Cloudflare
• Python, Bash, PowerShell, Go, PHP
• CSPM, CWPP, CNAPP

Team & Environment

You will be a key member of the Cloud Security Operations function.

Benefits & Compensation

• Highly competitive compensation packages, including bonuses and the potential for shares.
• Prioritize personal development and offer regular training and an annual learning stipend.
• Join a talented team of over 30 nationalities working in 14 countries.
• We offer autonomy, mentoring, and challenging goals.

Foodics is an equal opportunity employer.