Cloud Security Engineer - Engineering

Overview

Engineering, Cloud Security Engineer I
Location – Irvine, CA

Company Overview

Hyundai Auto Ever America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis. HAEA offers a globally focused and collaborative environment where you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations. If you’re passionate about technology and eager to make an impact at a world-class company, Hyundai Auto Ever America is the place to grow your career.

The Cloud Security Engineer I is responsible for supporting and maintaining the organization’s Cloud Security Standard across all cloud service providers, ensuring consistent implementation, operational effectiveness, and lifecycle management. This role sits within the Security Architecture and Engineering organization and focuses on strengthening cloud security posture through standards governance, logging and monitoring integration, and hands-on management of Cloud Security Posture Management (CSPM) capabilities.

The role requires practical experience working across AWS, Azure, and GCP environments, with a strong emphasis on ensuring cloud-native and third-party logging is consistently integrated into centralized log management and SIEM platforms to support security monitoring, detection, and incident response. The key responsibilities of this role are as described below:

• Supporting the Cloud Security Architect, maintain and support the Cloud Security Standard across all iterations and lifecycle phases, ensuring it remains current, actionable, and aligned with:
  • Cloud provider capabilities (AWS, Azure, GCP)
  • Organizational security requirements
  • Industry best practices and threat landscape changes
• Partner with other teams to ensure standards are:
  • Technically feasible
  • Consistently implemented
  • Clearly documented and communicated
• Support reviews and updates to the standard as cloud services, architectures, and risks evolve.

• Ensure cloud logging is consistently enabled, configured, and maintained across AWS, Azure, and GCP environments.
• Work with Security Operations and Platform teams to ensure logs are:
  • Reliably ingested into centralized log management and SIEM platforms
  • Structured and normalized to support detection, investigation, and audit needs
• Validate coverage for critical log sources, including:
  • Identity and access activity
  • Network and perimeter events
  • Resource configuration and management activity
• Support troubleshooting of log gaps, ingestion failures, and data quality issues.

• Operate and maintain CSPM capabilities across AWS, Azure, and GCP environments.
• Monitor CSPM findings to identify:
  • Misconfigurations
  • Policy violations
  • Security control gaps
• Partner with engineering teams to drive remediation of CSPM findings, ensuring:
  • Clear ownership
  • Risk-based prioritization
  • Sustainable fixes
• Support tuning of CSPM policies and rules to reduce noise and improve signal quality.
• Collaborate with the Risk Operations team to ensure CSPM findings that are not automatically remediated are tracked as Risk Issues.

• Collaborate with Cyber Defense, Incident Response, and the Integrated Risk Management team to ensure cloud security controls support operational and risk objectives.
• Provide input into cloud-related risk assessments, audits, and security reviews.

Assist with security investigations and incident response activities involving cloud environments.

• Experience: 5+ years of experience in Cloud Security, Cloud Engineering, or Security Engineering. Practical experience working with AWS, Azure, and GCP in…