Cloud Security Engineer

Are you ready to be part of a company that's not just talking about the future, but actively shaping it? Join The AES Corporation (NYSE: AES), a Fortune 500 company that's leading the charge in the global energy revolution. With operations spanning 14 countries, AES is committed to shaping a future through innovation and collaboration. Our dedication to innovation has earned us recognition as one of the Top Ten Best Workplaces for Innovators by Fast Company in 2022. And with our certification as a Great Place to Work, you can be confident that you're joining a company that values its people just as much as its groundbreaking ideas.

AES is proudly ranked #1 globally in renewable energy sales to corporations, and with $12.7B in revenues in 2023, we have the resources and expertise to make a significant impact as we provide electricity to 25 million customers worldwide. As the world moves towards a net-zero future, AES is committed to meeting the Paris Agreement's goals by 2050. Our innovative solutions, such as 24/7 carbon-free energy for data centers, are setting the pace for rapid, global decarbonization.

If you're ready to be part of a company that's not just adapting to change, but driving it, AES is the place for you. We're not just building a cleaner, more sustainable future - we're powering it. Apply now and energize your career with a true leader in the global energy transformation.

The AES Cyber Security Team is looking for a Cloud Security Engineer responsible for assisting in the maintenance and improvement of incident readiness and response efforts to defend our cloud environment. The individual in this position will work as a member of the Cyber Defense organization responsible for a variety of cybersecurity functions utilizing their understanding of cyber security practices and technologies.

The candidate should demonstrate the ability to conduct incident response activities with a focus on cloud platforms, recommend improvements to increase incident readiness posture, and design and document security playbooks and technical documentation to assist in maturing of the wider cloud security programs.

Responsibilities:

• Detect, investigate, and respond to security incidents across the organization offering subject matter expertise in cloud security related incidents.
• Assist in the hands-on configuration, operation, monitoring, and continuous tuning of the Cloud Native Application Protection Platform (CNAPP).
• Create and maintain cloud security playbooks to include security automation, policy tuning, and incident response. Assist in the connection of cloud security tools with other threat and vulnerability management initiatives.
• Research, design, and test known tactics, techniques, and procedures used in cloud security attacks to validate effectiveness of security controls across the cloud environment.
• Assist in the approval and onboarding of new Software as a Service (SaaS) solutions in use by the organization. Ensure security controls are applied to new and existing SaaS solutions.

Required Skills:

• 3+ years of cyber security, systems administration, networking and/or cloud engineering experience.
• Excellent knowledge of the incident response process with experience in identifying, containing, and responding to cloud security incidents.
• Expert knowledge of enterprise-grade security technologies and capabilities (e.g. SIEM, DLP, EDR, IPS, Firewalls, Web Security, etc.)
• Strong knowledge of cloud security operations including tuning of logging and monitoring, Identity Access Management (IAM), and network security best practices.
• Hands-on experience configuring, managing, and operating Cloud Security Posture Management (CSPM) and/or Cloud Native Application Protection Platform (CNAPP) tools such as Prisma Cloud, Orca, Wiz, SentinelOne, Palo Alto, Tenable Cloud, or similar technologies.
• Excellent communication skills (verbal and written), including proficiency in English.
• Ability to work in an environment with evolving requirements and dynamic schedules.

Desired Skills:

• Prior experience with red or purple team exercises in the scope of cloud assets and technologies.
• Prior experience with AWS, Azure, or Google Cloud.
• Prior experience with cyber security tools and capabilities for SaaS cloud applications.
• Prior experience with cyber security incident response.
• Security or Cloud Related Certifications is a plus
• Knowledge of the Spanish language is a plus.

Location: Arlington, VA or Indianapolis, IN. Eligible for relocation.

AES is an Equal Opportunity Employer who is committed to building strength and delivering long-term sustainability through diversity and inclusion. Respecting all backgrounds, differences and perspectives enables us to improve the lives of our people, customers, suppliers, contractors, and the communities in which we live and work. All qualified applicants will receive consideration for employment without regard to sex, sexual orientation, gender, gender identity and/or expression, race, national origin, ethnicity, age, religion, marital status, physical or mental disability, pregnancy, childbirth, or related medical condition, military or veteran status, or any other characteristic protected under applicable law. E-Verify Notice: AES will provide the Social Security Administration (SSA) and if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 to confirm work authorization.