Job Description

At Northwestern Mutual, we are strong, innovative and growing. We invest in our people. We care and make a positive difference.

Northwestern Mutual is looking for enthusiastic technologists who are looking to grow their career in cloud security. In this position, you will be an integral part of the DevSecOps team, partnering with teams across cybersecurity, infrastructure & cloud services, and application teams. They will collaborate and influence architectural direction of cloud platform capabilities that are in alignment with organization policy and standards. This role requires experience in public cloud and an exceptional level of enthusiasm for cloud-native technology with a proven track record of self-motivated accomplishment. This is an exciting opportunity to build upon technical experience in cloud security engineering.

In this role, the candidate can expect to:

* Develop secure, resilient enterprise-grade public cloud patterns and processes in tandem with architects and system engineers that meet organization policy and standards. Examples may include security preventative/detective/auto-remediation controls, logging/monitoring/alerting, and IAM role and policy governance
* Develop Infrastructure as Code for platform security capabilities and services using Terraform, AWS native services such as Lambda, Kubernetes native deployments, and Docker
* Actively monitor, assess and recommend tactical and strategic initiatives based on new and emerging threats posing risk to our public cloud computing environments
* Stay apprised of current and proposed security changes impacting regulatory, privacy and security industry best practices
* Manage remediation efforts of findings from security assessments

Required Skills

* Solid understanding of traditional or cloud computing, including networking, compute, storage, app development, data, operations, or security
* Proficiency with development and scripting languages (Python, Powershell, and/or Bash)
* Demonstrated experience with Infrastructure as code concepts and tooling including Terraform, Python, and YAML
* Knowledgeable about secure architecture, engineering and design principles
* Excellent analytical, critical thinking, and troubleshooting skills

Preferred Skills and Experience

* Bachelors degree with an emphasis in Computer Science, Computer Engineering, Software Engineering, MIS or related field
* 1-3+ years' experience in AWS
* 2-5+ years' experience in cybersecurity as a practitioner
* Understanding of applicable risk management frameworks from NIST and Cloud Security Alliance
* Experience in development of applications through automated deployment and orchestration services, such as GitLab, Jenkins, Ansible or Kubernetes
* Understanding of a wide-range of cybersecurity capabilities including application security, security engineering, identify & access management, incident response, logging & monitoring, penetration testing, and vulnerability management
* Relevant certifications from AWS, GIAC, ISC(2) and associated technology partners

This job is not covered by the existing Collective Bargaining Agreement.

Required Certifications:

Grow your career with a best-in-class company that puts our clients interests at the center of all we do. Get started now!

We are an equal opportunity/affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, disability, age or status as a protected veteran, or any other characteristic protected by law.