Senior Cloud Security Engineer

Job Description

Overview

Job Title: Senior Cloud Security Engineer

Department: Technical

Reporting To: Senior Director IS

Employment Type: Full Time

Pay Transparency:

The anticipated starting salary range for Philadelphia-based individuals expressing interest in this position is $120,000/yr. to $160,000/yr.

Salary to be determined by the education, experience, knowledge, skills, abilities and location of the applicant, as well as internal and external equity.

Audacy offers employees who are eligible for benefits with a comprehensive benefits package which includes: a health care coordinator, medical, dental, vision, mental health, telemedicine, flexible spending accounts, health savings account, disability, life insurance, critical illness, hospital indemnity, accident insurance, paid time off (sick, flex-time away/vacation days, personal, parental, volunteer), 401(k) retirement plan, student loan payment assistance program, legal assistance, life assistance program, identity theft protection, discounted home and auto insurance, and pet insurance.

Location: Remote
Overview:

At Audacy, our core values of Community, Curiosity, Creativity, and Courage guide our work. As an innovative and industry-leading multi-platform entertainment company, an Audacy senior security engineer must collaborate with a diverse community of creative engineers in order to facilitate the development of a resilient and streamlined security framework across a hybrid cloud environment. This courageous candidate should welcome the challenge of helping architect and secure new cloud and distributed cloud infrastructure.

As part of our small but capable team, you will have the opportunity to contribute your own creative ideas to the security stack used by the organization. This role will focus heavily on building new capabilities. Audacy continues to innovate with a 'container-first' strategy, requiring the development of a security stack that can provide seamless visibility between on-premises and cloud workloads.

You will lead efforts to assess risks, develop innovative security solutions, and enforce compliance with industry standards and regulations, all while collaborating closely with cross-functional teams and mentoring junior engineers.

Responsibilities

What You'll Do:
• Cloud Security Architecture Design and Implementation:
• Design and implement robust security architectures for hybrid cloud environments, incorporating audit logs, cloud and data posture management tooling with other best practices, industry standards, and regulatory requirements.
• Deploy and configure security tools and technologies, including runtime detection and prevention tooling, SIEM, SOAR, access controls, and identity management solutions.
• Security Monitoring and Incident Response:
• Develop and maintain monitoring systems for detecting and responding to security incidents and breaches in cloud environments.
• Conduct regular security assessments and review vulnerability scan findings to identify and mitigate risks.
• Cost Optimization and Automation:
• Understand cloud usage patterns and trends, cloud pricing models, and cost management tools to ensure cloud cost optimization.
• Implement automation scripts and tools, integrated with existing and future security solutions, to streamline security processes, enhance incident response capabilities, and enforce security policies across cloud deployments.
• Compliance and Documentation:
• Ensure compliance with relevant regulatory requirements (e.g., GDPR, CCPA, etc.) and industry standards (Familiarity with cloud security best practices and industry standards (e.g., CIS benchmarks, NIST SP 800-171)) pertaining to cloud security.
• Establish and maintain documentation for security policies, procedures, and controls, using insights from tools like Wiz, Tenable, Darktrace, and Security Scorecard.
• Team Collaboration and Mentorship:
• Provide leadership in guiding and training internal teams on cloud security best practices, threat mitigation strategies, and compliance obligations.
• Foster a culture of security awareness and accountability throughout the organization, leveraging insights from CSPM, DSPM and other sources.
• Work closely with cross-functional teams, including IT operations, development, and compliance, to integrate security measures into cloud-native and hybrid cloud environments.
• Mentor junior engineers and IT staff, providing guidance, support, and professional development opportunities.

Qualifications

More About You:

Required/Preferred:
• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred).
• Minimum 3-5 years of experience in infrastructure development and/or cloud security engineering roles, with a focus on GCP and AWS.
• Proficiency in designing, implementing, and managing security controls within cloud platforms, such as IAM, VPC, Zero Trust principles, IaC, IAAS, Security Groups, Key Management Services, SDLC, CI/CD pipelines, and Network Security.
• Hands-on experience with security tools and technologies, including CSPM, DSPM, SIEM, DLP, WAF, CASB, and endpoint security solutions.
• Strong understanding of hybrid networking concepts, protocols, and architecture, with the ability to troubleshoot complex security and network issues.
• Familiarity with scripting languages (e.g., Python, PowerShell) and automation frameworks for security orchestration and configuration management.
• Industry certifications in cloud security (e.g., CCSK, CCSP, GCP Professional Cloud Security Engineer, AWS Certified Security - Specialty) are highly desirable.
• Excellent analytical, problem-solving, and communication skills, with the ability to work effectively in a dynamic, fast-paced environment.
• A proven track record of being a strong self-learner and working with new technologies that have little or no documentation, demonstrating creativity and innovation in your problem-solving approach.

If you are an experienced cloud security professional with a passion for securing hybrid cloud environments, a strong self-learning ability, and a creative mindset, we encourage you to apply for this exciting opportunity to be a part of our innovative and dedicated team at Audacy.

Core Values & Cultural Fit:
• Demonstrate intellectual curiosity in understanding Audacy's unique security challenges across multiple platforms
• Apply creative problem-solving to develop comprehensive security solutions
• Foster a collaborative security culture that enables innovation
• Build partnerships across departments to create security solutions that enhance rather than hinder operations

Important Notes:

Please be aware that Audacy will never ask you to send money at any point during the hiring process. Communication from legitimate Audacy representatives will only come from email addresses ending in @audacy.com. If you receive any suspicious requests or communications, please verify their authenticity before responding.

#LI-ET1 About Us

Audacy is a scaled, leading multi-platform audio content and entertainment company differentiated by its exclusive, premium audio content. Audacy operates one of the country's two scaled radio broadcasting groups with leading positions across the country's largest markets, as well as one of the country's largest podcast networks and the Audacy direct-to-consumer streaming platform. Audacy is a major e

[more...]

Jobcode: Reference SBJ-rjk9xb-3-131-37-82-42 in your application.