Cloud Security Engineer

Overview

Shape the Future with Us. At Lubrizol, we’re transforming the industry through science, sustainability, and a culture of inclusion. As part of our global team, you’ll be empowered to make a real impact—on your career, your community, and the world around you.

Travel: Job Type: Full-time. Collaborate in person 4 days each week, with 1 flexible day.

• As a Cloud Security Engineer, you will strengthen Lubrizol’s global cloud security posture across AWS, Azure, and GCP by implementing robust security protocols, policies, and procedures to safeguard cloud-based systems, applications, and data.
• Design, deploy, and maintain cloud-native and third-party security tools and solutions that enhance monitoring, detection, and response capabilities across our environments.
• Conduct cloud-specific vulnerability assessments, penetration testing, and risk evaluations to proactively identify and mitigate risks, prioritizing remediation to fortify defenses.
• Ensure compliance with international regulations and industry frameworks (e.g., ISO 27001, GDPR, NIST, SCF, PCI DSS) through technical audits, assessments, and documentation.
• Collaborate closely with Dev Ops, application development, and infrastructure teams to embed security into cloud architectures, CI/CD pipelines, and deployment processes using secure-by-design principles.
• Continuously monitor emerging threats, technologies, and compliance requirements; recommend enhancements to our cloud security architecture and operational processes.
• Contribute to incident response activities and other security initiatives that improve our global cybersecurity resilience.

• Bachelor’s degree in Computer Science, Information Technology, or a related field; or a relevant combination of education and 5+ years of experience.
• 3+ years of experience in cybersecurity or a related role with hands-on work in cloud security across AWS, Azure, and/or GCP.
• Proficiency implementing security protocols, policies, and procedures; conducting vulnerability assessments, penetration testing, and risk evaluations for cloud or hybrid environments.
• Experience performing technical security audits and assessments aligned to frameworks such as ISO 27001, NIST, GDPR, PCI DSS, SOC 2.
• Practical experience integrating security into cloud architectures and CI/CD pipelines in collaboration with Dev Ops and application teams.
• Strong analytical, problem-solving, and communication skills with the ability to influence and drive accountability across teams.
• Working knowledge of identity and access management, PKI, MFA, and authentication/authorization protocols (e.g., SAML, OAuth).

• Advanced degree in a relevant field.
• Certifications such as GIAC Cloud Security Essentials (GCLD), GIAC Public Cloud Security (GPCS), GIAC Security Essentials (GSEC), Microsoft Azure Fundamentals, CompTIA Cloud Essentials, Automation certificates, or Microsoft 365.
• Hands-on experience with cloud security platforms and tools (e.g., CASB, CSPM, CWPP) and SIEM solutions (e.g., Splunk ES, QRadar, XSIAM).
• Familiarity with SAP S/4
  
  HANA, industrial control systems (DCS/PLC/SCADA), and related security considerations.
• Experience with network security technologies (firewalls, IDS/IPS, VPN, NAC) and web application firewalls (e.g., F5 BIG-IP).
• Knowledge of data encryption and key management (e.g., Azure Key Vault) and vulnerability management tools (e.g., Rapid7 Insight
  
  VM).

At Lubrizol, we’re committed to providing a safe, inclusive, and empowering environment where you can do your best work—whether in a lab, on the production floor, or in a hybrid office setting. Depending on your role, your work environment may include:

• Standing, walking, or operating equipment for extended periods
• Working in a lab or manufacturing setting with appropriate PPE provided
• Use of computers and digital tools in an office or hybrid environment
• Occasional lifting or movement of materials
• Adherence to rigorous safety protocols and ergonomic standards

We continuously invest in our facilities and technologies to ensure they support your…