Cloud Security Engineer [Devops]...

Immunotec is a privately held company whose mission is to offer, through a sales network, high quality nutritional and wellness products supported by scientific research that improve quality of life and performance. Immunotec has offices in Canada, United States, Dominican Republic, Mexico, Guatemala, Colombia, Peru, Ecuador, Bolivia, Ireland and Spain.

The Cloud Security Engineer must have a strong DevOps and web development background to help build, enhance, and maintain security monitoring environments across our Microsoft O365, Azure, and CloudFlare platforms. This role is key to improving our ability to monitor, detect, and respond to security threats across cloud infrastructure and development environments. The ideal candidate will have hands-on experience in both cloud security and DevOps practices, along with a solid understanding of web code security.

# MAIN RESPONSIBILITIES

Develop, implement, and maintain security monitoring environments for O365, Azure, and CloudFlare.

Work closely with IT, DevOps, and security teams to identify potential security breaches, vulnerabilities, and weaknesses in cloud systems and web applications.

Provide hands-on support in configuring, securing, and automating cloud infrastructure and services in alignment with DevOps practices.

Monitor, analyze, and respond to security events, ensuring that threats in both cloud infrastructure and web applications are quickly detected and mitigated.

Implement security controls for web applications, focusing on secure coding practices, vulnerability scanning, and remediation.

Collaborate with development teams to ensure that security is integrated into the CI / CD pipeline and that security best practices are followed throughout the software lifecycle.

Conduct risk assessments, security audits, and vulnerability management for both cloud environments and web applications.

Recommend and implement improvements to security monitoring systems and processes to enhance threat detection and incident response.

Assist in incident response, including investigation, containment, and remediation of security breaches across both cloud environments and web-based systems.

Stay up to date on cloud security, DevOps practices, and web application security trends and best practices.Provide training and knowledge sharing to improve security awareness within the team and across the organization.

2. REQUIREMENTS

Strong hands-on experience with cloud platforms, specifically Microsoft Azure.

Practical experience with CloudFlare or similar cloud-based security solutions.

Solid understanding of security best practices, including vulnerability management, threat detection, and incident response in both cloud and web environments.

Experience with DevOps practices, including infrastructure as code (IaC), continuous integration / continuous deployment (CI / CD), and automation.

Familiarity with securing web applications and understanding of secure coding practices (e.g., OWASP top 10).

Experience with security information and event management (SIEM) tools and cloud monitoring services.

Strong troubleshooting and analytical skills to diagnose and mitigate security issues.

Ability to work independently and as part of a collaborative security team.

Experience in security automation and scripting (e.g., PowerShell, Python, Bash).

Excellent communication skills and the ability to explain technical issues to non-technical stakeholders.

3. EXPERIENCE, COMPETENCIES AND APTITUDES

Certifications in cloud security (e.g., AWS Certified Security Specialty, Microsoft Certified : Azure Security Engineer).AWS experience (optional but beneficial).

Experience with DevOps tools (e.g., DevOps, GitLab, Terraform, Docker).

Knowledge of web application firewalls (WAF) and intrusion detection / prevention systems (IDS / IPS).

Experience with threat intelligence platforms and SIEM tools like Microsoft Sentinel, or similar.

Knowledge of compliance frameworks (e.g., NIST, CIS, GDPR) and their application to cloud and web environments.