Jr Cloud Security Automation Engineer

Job Summary:

We are seeking a motivated Junior Cloud Security Engineer to join our growing consulting team. This is an excellent opportunity for an early-career professional to develop expertise in cloud security while working alongside senior consultants on client engagements. You will support various organizations in securing their cloud-native workloads and gain hands-on experience with modern security automation tools and practices.

Key Responsibilities:

• Client Support: Assist senior consultants in client engagements, participating in meetings, taking notes, and supporting technical assessments under guidance. 

• Kubernetes Security Learning: Support the implementation of Kubernetes security controls including basic cluster hardening, network policies, and RBAC configurations while learning best practices.

• Policy as Code Support: Help implement security policies using tools like OPA (Open Policy Agent) or Kyverno, working under the mentorship of senior team members.

• Infrastructure as Code (IaC) Assistance: Support the development and review of secure IaC templates using Terraform, CloudFormation, or ARM templates with senior oversight.

• Secrets Management Implementation: Assist in configuring and implementing secrets management solutions like HashiCorp Vault, AWS Secrets Manager, or Kubernetes Secrets.

• CI/CD Security Integration: Help integrate basic security controls into CI/CD pipelines using tools like GitHub Actions, GitLab CI, or Jenkins under senior guidance.

• Cloud Security Research: Research and document cloud security best practices, tools, and emerging threats to support team knowledge sharing.

• Documentation & Automation: Create documentation, scripts, and basic automation tools to support client deliverables and internal processes.

• Learning & Development: Actively participate in mentorship programs, shadowing senior consultants, and pursuing relevant certifications.

• Quality Assurance: Perform testing and validation of security configurations and automation scripts before client delivery.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.

• 1-3 years of experience in cloud computing, DevOps, or information security roles.

• Basic understanding of cloud platforms (AWS, Azure, or GCP) and their core services.

• Familiarity with containerization technologies, particularly Docker and basic Kubernetes concepts.

• Experience with at least one Infrastructure as Code tool (Terraform, CloudFormation, etc.).

• Basic scripting skills in Python, Bash, or PowerShell.

• Understanding of fundamental security concepts and best practices. 

• Strong communication skills and eagerness to learn in a client-facing environment.

• Ability to work collaboratively and take direction from senior team members.

Preferred Skills:

• Basic knowledge of CI/CD platforms (GitHub Actions, GitLab CI, Jenkins).

• Exposure to Policy as Code concepts or tools.

• Understanding of secrets management principles. 

• Familiarity with cloud security frameworks (CIS, NIST).

• Interest in pursuing security certifications such as: 

  • AWS Certified Cloud Practitioner or Security Specialty

  • Certified Kubernetes Administrator (CKA)

  • CompTIA Security+