Job Description
The Senior Cloud Security Engineer is responsible for designing, implementing, and maintaining security measures across Celonis's multi-cloud infrastructure, including cloud security best practices, container and Kubernetes security, automation, monitoring, and access management, to protect the company's SaaS platform and ensure compliance.
Key Responsibilities
- Design and implement security measures to protect cloud infrastructure across AWS, Azure, and GCP
- Harden cloud infrastructure by configuring network controls, encryption, and logging using native security features
- Secure containerized applications and Kubernetes clusters through security policies, image scanning, and secret management
- Develop and maintain automation scripts and Infrastructure-as-Code to embed security into deployment pipelines
- Enhance cloud security monitoring by tuning CSPM tools and investigating security alerts or incidents
- Manage and improve cloud Identity and Access Management (IAM) configurations for least-privilege access
- Conduct vulnerability scans on cloud assets and container images, and remediate identified issues
- Collaborate with development, DevOps, and SRE teams to advise on secure architecture and practices
- Review new features and infrastructure for security risks before deployment
Requirements
- Proven Cloud Security Expertise with 5 years of hands-on experience in security engineering focusing on cloud environments including AWS, Azure, and GCP, with deep understanding of cloud architecture and services, and proven experience implementing security controls in a production cloud environment.
- Strong experience securing containerized applications and Kubernetes clusters, including familiarity with tools and practices for container security such as container image vulnerability scanning, runtime security, Kubernetes network policies, and service mesh security.
- Proficiency in Infrastructure-as-Code and scripting, with demonstrated ability to use Terraform, CloudFormation, or similar tools to deploy secure configurations, and to write scripts in Python, Go, or Bash to automate security workflows.
- Hands-on experience with Cloud Security Posture Management (CSPM) solutions or implementing automated checks for cloud compliance, with the ability to identify misconfigurations and weaknesses in cloud setups such as S3 bucket policies and public exposure of resources, and remediate them.
- In-depth understanding of cloud Identity and Access Management (IAM) and access control mechanisms, including experience designing role-based access schemes, managing federated identities such as SAML and OIDC, and implementing principles of least privilege across multiple cloud accounts and services.
- Experience with vulnerability scanning tools such as Tenable, Qualys, or similar, including interpreting their output, and knowledge of common cloud threats and vulnerabilities such as OWASP Cloud Top 10 and CIS benchmarks, with the ability to remediate identified issues.
- A track record of securing real cloud deployments and solving security incidents or challenges in production environments, demonstrating hands-on problem-solving skills and tangible security outcomes.
- Excellent communication skills to articulate complex security issues to both technical and non-technical colleagues, including experience writing security documentation or standard operating procedures, and fostering a culture of security awareness within teams.
Benefits & Perks
generous PTO
hybrid working options
company equity RSUs
comprehensive benefits
extensive parental leave
dedicated volunteer days
access to resources such as gym subsidies, counseling, and well-being programs
benefit from clear career paths, internal mobility, a dedicated learning program, and mentorship opportunities
connect and support through dedicated inclusion and belonging programs
opportunity to work with leading process mining technology
international team collaboration
contribute ideas in an open, autonomous environment
Ready to Apply?
Join Celonis and make an impact in renewable energy
Stay Updated on Sustainability Jobs
Get the latest renewable energy jobs and career tips delivered to your inbox.
Job Alerts
Get notified about new sustainability jobs
More at Celonis
More jobs at Celonis
Senior Data Engineering Consultant Manufacturing
Celonis
NEW
New York
Full Time
16h
$114k-145k
Senior Data Engineering Consultant Energy
Celonis
NEW
New York
Full Time
16h
$114k-145k
Senior Cloud Security Engineer
Celonis
NEW
Madrid
Full Time
16h
More jobs in Location not specified
Front-End Engineer Senior Staff
Equilibrium Energy
NEW
Remote
Full Time
16h
Software Engineer- Data Engineering Staff Sr Staff
Equilibrium Energy
NEW
Remote
Full Time
16h
Energy Analyst Staff Sr Staff
Equilibrium Energy
NEW
Remote
Full Time
16h