وصف الوظيفة
Mozn is a rapidly growing and leading data science & product development firm based in Riyadh with a proven track record of excellence in supporting and growing the analytics ecosystem in Saudi Arabia. Mozn is a trusted analytics partner for the largest government organizations in Saudi Arabia, as well as many large corporations and startups. We are in a critical stage of scaling the company to build institutional analytics knowledge within Mozn and Saudi Arabia. It is an exciting time to work in Saudi Arabia; through Vision 2030, the rate of social and industrial change is staggering.
We are seeking an experienced Cloud Security Staff Engineer to join our Cloud Engineering Department. In this role, you will play a critical role in designing, implementing, and maintaining secure cloud environments. Collaborating closely with the Cybersecurity team, you will drive network security initiatives, enhance cloud Identity and Access Management (IAM) strategies, and ensure the integrity, confidentiality, and availability of our cloud infrastructure.
Cloud engineering’s mission is to enable engineering teams and data science to be fast, secure and efficient by creating self-service platforms that accelerate time to value.
إمتيازات الوظيفة
We think you'll enjoy working at Mozn. Here's why:
- We selectively choose to undertake projects with impact; our users and clients trust us to solve mission-critical problems.
- We move quickly, but carefully and confidently. Iterations happen on the scale of days to weeks, and we invest considerable effort in minimizing the operational overhead to empower you to do your best work.
- You will be given a lot of responsibility and trust. We believe that the best results come when the people responsible for a product are given the freedom to do what they think is best.
متطلبات الوظيفة
- Cloud Security Architecture: Design and implement secure cloud architectures aligned with best practices, organizational goals, and industry standards.
- Cloud IAM Management: Develop, implement, and manage robust IAM policies, ensuring least privilege access and secure identity federation across cloud environments.
- Network Security: Develop and enforce network security controls, including firewalls, VPNs, and zero-trust principles, to safeguard cloud environments.
- Collaboration with Cybersecurity: Work closely with the Cybersecurity team to identify risks, define security requirements, and ensure alignment across departments.
- Incident Response: Lead cloud security incident investigations, implement remediation strategies, and develop proactive measures to mitigate future risks.
- Compliance: Ensure cloud environments comply with regulatory standards and organizational policies (e.g., GDPR, ISO 27001, NIST, or SOC 2).
- Automation & CI/CD: Integrate security tools into CI/CD pipelines to enable automated vulnerability scanning, compliance checks, and secure deployments.
- Monitoring and Threat Detection: Implement and manage cloud-native security solutions to detect and respond to threats in real time.
- Documentation: Maintain comprehensive documentation for security policies, procedures, and architectures to support audits and knowledge sharing.
- Mentorship: Provide technical leadership and mentorship to other engineers on cloud security best practices and emerging trends.
Qualifications:
- Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience).
- Minimum of 7+ years in cybersecurity, cloud engineering, or a related field.
- Proven expertise in securing cloud platforms like AWS, Azure, or Google Cloud Platform (GCP).
- Deep understanding of cloud security architecture and tools, including IAM, encryption, and WAF.
- Hands-on experience with designing and managing IAM policies, roles, and permissions in cloud environments.
- Proficiency in scripting or programming (Python, Go, or similar).
- Experience with container security tools (e.g., Kubernetes security, Docker).
- Experience with DevSecOps practices and tools (e.g., Terraform, Jenkins, Git).
Preferred Qualifications:
- Certifications: Preferred certifications include AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer, GCP Professional Cloud Security Engineer, or Certified Identity and Access Manager (CIAM).
- Expertise in managing complex IAM scenarios, such as multi-cloud environments or hybrid identities.
- Knowledge of hybrid cloud environments and securing multi-cloud architectures.
- Familiarity with Security Information and Event Management (SIEM) systems.
- Experience in securing serverless computing models and microservices.