The Cloud Security Engineer role is part of the Cloud Security Engineering function and is responsible for ensuring the secure design and delivery of Cloud solutions to the Application teams in the Enterprise (internal customers), based on customer requirements. A Security Engineer is responsible for delivering architecture guidance and educating the Application teams and Cloud COE (amongst others) to design and implement secure coding and continuous security practices for their infrastructure and applications. This role will specialize in all aspects of information security management as well as business and regulatory compliance using Cloud services in large-scale computing environments with a global Enterprise.

What You Will Do

  • Work to implement security standards that align with the organization's security policy and IT infrastructure under the guidance of the product owner and security stakeholders.
  • Guide the implementation of security standards and controls for Cloud solutions.
  • Collaborate on the implementation of standardized solutions to ensure secure access for products or applications within the Cloud environment.
  • Identity and Access Management (IAM), Identity Federation / SSO
  • SIEM and Audit Logging (CloudTrail & Config)
  • Management of Security Groups and ACLs, Perimeter security with WAF and Shield DDoS
  • Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management
  • Design and build fault-tolerant and scalable distributed systems, adhering to AWS design principles and Security best practices.
  • Leverage AWS security services such as Security Hub and GuardDuty to enhance threat detection and response capabilities.
  • Collaborate on the implementation of Cloud Architecture solutions, ensuring adherence to defined security standards across the Enterprise, encompassing both application and infrastructure perspectives.
  • Conduct regular testing and scanning of Cloud products and applications to ensure compliance with security standards.
  • Mentor, teach, and guide junior team members on engineering practices and technical tasks.
  • Deliver advanced Cloud security patterns and implementations based on customer requirements.
  • Educate teams across the Enterprise on secure coding and continuous security practices within their applications.

What You Will Need:

Qualifications

  • Familiarity with Agile/Scrum methodologies.
  • Advanced understanding of Cloud computing technologies.
  • Knowledge of AWS's Well-Architected Framework and Cloud migration industry standards.
  • Prior programming experience in at least one language (e.g., C++, Java, Python, Ruby).
  • Experience with IAM in AWS and Azure, and familiarity with tools such as Sailpoint, CyberArk, Azure AD, Octa, Conjure, or similar.
  • Experience with a suite of AWS Security services (e.g. Security Hub, GuardDuty, Inspector, etc.)
  • Proficiency in security solutions like WAF, IPS, and anti-DDOS systems.
  • Strong technical writing skills for documenting environments and procedures.
  • Familiarity with industry compliance and security standards.
  • Knowledge of continuous security practices and IT compliance and risk management requirements. (e.g. security, privacy, SOX, etc.)
  • Understanding of encryption in-flight and at-rest practices.
  • Experience with infrastructure automation and continuous delivery technologies. (e.g. Terraform, CloudFormation etc.)
  • Experience with enterprise security packages, identity management, and federation systems.
  • Knowledge of Cloud Security Posture Management (CSPM) frameworks.
  • Strategic thinking ability to address business, product, and technical challenges.
  • Ownership mindset with a high sense of urgency and entrepreneurial spirit.
  • Ability to think outside the box and approach problems with multiple solutions.
  • AWS Cloud Practitioner (mandatory)
  • At least 1 AWS Certification at Associate or higher.

Preferred

  • AWS Associate DevOps
  • AWS Associate Architect
  • AWS Certified Cloud Security Specialist
  • CompTIA Security +

What we offer: 

  • Competitive salary
  • Comprehensive health package
  • Brand new office at an excellent location
  • Hybrid working
  • Opportunities for growth and advancement
  • A highly people-centric, positive, and supportive work environment

Aegon is an international financial service holding company headquartered in The Hague, the Netherlands. Our ambition is to build leading businesses that offer their customers investment, protection, and retirement solutions. Our purpose is to help people live their best lives, a goal that runs through all of our activities. The company has multiple locations across the globe, with core markets in the UK and the US, partnerships in Spain & Portugal, Brazil, and China, and an Asset Management organization with locations in the UK, US, NL, and Hungary. In the Netherlands, Aegon generates value via strategic shareholding in a market-leading insurance and pensions company.

 

Aegon Global Business Solutions Center is supporting these businesses with IT, Finance, Risk, Model Validation, Actuarial, Audit, and Asset management services with a growing team of approx. 300 people, based in Budapest, Hungary.

#LI-Hybrid

#LI-AS

AGT Hungary IT Services LLC (HUN entity)