Senior Cloud Security Engineer

E. & J. Gallo Winery Privacy Policy

Why Gallo?

With a global portfolio of over 100 unique wine and spirits brands, we are the largest family-owned winery in the world. Apply Today! Our Brands. Your Future.

US Remote is an option for this role.

As a Senior Cloud Security Engineer you will be responsible for cross collaborating with multiple engineering and security teams to develop, apply, and maintain the highest security standards are for all Gallo products and services deployed in the cloud by building security tools, and reviewing and collaborating on secure designs. You will develop and enhance AWS resources. You will be responsible for building high quality cloud solutions that are scalable. Leads Cloud Security initiatives, projects, and enhancements.

What You Will Do:

• Builds, develops, documents, and maintains security and compliance architecture standards for cloud.
• Leads implementation of security and ensures compliance requirements are met and maintained.
• Implements, reviews, and maintains strong access controls and identity roles within AWS IAM.
• Proactively provides technical expertise on trends and emerging changes to AWS Cloud Security landscape.
• Responsible for driving AWS Cloud Security initiatives with the collaboration of our cloud center of excellence (CCoE) team.
• Collaborates with the DevOps teams to operationalize newly developed security capabilities.
• Facilitates security architecture reviews of the application stack, including applications built on cloud and emerging technologies.
• Designs and executes security test cases to check for vulnerabilities or broken/missing security controls.
• Provides specific risk assessment and remediation guidelines for developers and business owners.
• Creates automations to streamline common tasks, tests, workflows, etc.
• Manages business and functional requirements to meet performance expectations and assesses the risks of various solution options.
• Documents and disseminates security guidelines for common security issues, remediation guidance, and security baselines.
• Maintains deep business and technical understanding to provide security consulting services, as needed, to various projects.
• Develops and manages consistent methods for reporting overall security status and security maturity of our cloud platforms.
• Collaborates with cross-functional teams to test and verify that solutions will meet the business requirements.
• Maintains satisfactory attendance, to include timeliness.
• Responsible for understanding and complying with applicable quality, environmental and safety regulatory consideration.

What You Will Need:

• Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 5 years of experience with Cloud Security reflecting increasing levels of responsibility; OR High School diploma or State-issued equivalency certificate plus 9 years of experience in Cloud Security, Data Security, Information Security, System Administration or equivalent with increasing levels of responsibility.
• 3 years of AWS experience.
• 1 AWS Certification (CISSP, CCSP, AWS Cloud Practitioner, AWS Solutions Architect, AWS Security Specialty).
• Knowledge of AWS architecture, security, and services.
• Experience collaborating on design and security reviews of cloud-based systems.
• Experience with modern software development and automation tools like Git and Jenkins.
• Familiarity with infrastructure as code technologies.
• Experience in at least Python or Golang or any other language.
• Experience with implementation of multi-tenant cloud environments.
• Experience in serverless compute such as AWS Lambda, Container implementations like AWS ECS, Kubernetes etc.
• Experience creating and maintaining threat models.
• Strong understanding of networking basics, including TCP/IP and layer 7 protocols.
• Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation. This may be in addition to travel requirements, if applicable, as listed in this job description.

What Will Set You Apart:

• Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering plus 7 years of experience with Cloud Security reflecting increasing levels of responsibility.
• Certifications - CISSP, CCSP, AWS Cloud Practitioner, AWS Solutions Architect, AWS Security Specialty.
• Excellent interpersonal, organizational, writing, communications, and briefing skills.
• Experience building code in AWS and/or Azure.
• Familiar with cloud API’s, cloud CLI / SDK’s.
• Knowledge of configuration tools i.e., Jenkins, Bamboo, Puppet, Ansible or Chef.
• Knowledge of containers and related orchestration. i.e., Kubernetes, docker.
• Experience with writing AWS Lambda functions for security remediations.

Gallo does not sponsor for employment based visas for this position now or in the future.

Compensation:

• Hiring Salary Range Posted: $97,020 - $161,800
• Actual compensation paid within the range will be determined by factors such as the education, experience, knowledge, skills and abilities of the applicant, internal equity, and alignment with market data.

Perks & Benefits:

• This position includes a competitive benefits package.   
• Winery - Please click here to view our full list of benefits or click here to watch our video.

  To view a full job description, please click here.

Requisition ID: 103827 

Anticipated close date - 3/23/24

Recruiter - Kyle Schnurbusch

#LI-KS1

INF001

Gallo’s policy is to afford equal employment opportunity to all applicants and employees and not to discriminate on the basis of race, traits historically associated with race, including but not limited to, hair texture and protective hairstyles (such as braids, locks, and twists), color, national origin, ancestry, creed, religion, physical disability, mental disability, medical condition as defined by applicable state law (including cancer and predisposing genetic characteristics), genetic information, marital status, familial status, sex, gender, gender identity, gender expression, sexual orientation (actual or perceived), transgender status, sex stereotyping, pregnancy, childbirth or related medical conditions, reproductive health decision making, age, military or veteran status, domestic violence or sexual assault victim status, or any other basis protected by applicable law. Nor will Gallo discriminate based on a perception that an individual has any of the foregoing characteristics or is associated with a person who has, or is perceived to have, any of those characteristics.

Gallo will comply with state and local laws prohibit discrimination for lawful out-of-work behavior, such as off-duty use of cannabis away from the workplace (subject to federal and state law exceptions), the existence of non-psychoactive cannabis metabolites in hair, blood, urine, or other bodily fluids as determined by a drug screening test (subject to federal and state law exceptions).

We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Gallo is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at 209.341.7000.

Gallo is enrolled in the Department of Homeland Security's E-Verifying program and will use the program to verify the employment eligibility of all newly hired employees as required.

E-Verify Notice

Right to Work

Employee Polygraph Protection Act