Cloud Security

Understands basic cloud security principles: IAM users and roles, principle of least privilege, MFA for console access. Knows why security groups and NACLs are needed, can verify S3 bucket public accessibility and follows basic AWS/GCP security recommendations.

Knows basic cloud security concepts for network engineering and can apply them in typical tasks. Uses standard tools and follows established team practices. Understands when and why this approach is used.

Understands basic Cloud Infrastructure Security concepts. Follows security guidelines. Recognizes common vulnerabilities in code.

Tests cloud security basics: IAM policies audit, public S3 buckets detection, security group review. Uses ScoutSuite/Prowler for cloud security assessment.

Understands basic Cloud Infrastructure Security concepts. Follows security guidelines. Recognizes common code vulnerabilities.

Configures cloud security through IaC: IAM policies with conditions and boundaries, SCPs for Organization, encryption at rest through KMS. Configures CloudTrail for auditing, AWS Config Rules for compliance checks, sets up VPC Flow Logs for network traffic monitoring.

Confidently applies cloud security for network engineering in non-standard tasks. Independently selects the optimal approach and tools. Analyzes trade-offs and proposes improvements to existing solutions.

Performs cloud penetration testing across AWS, Azure, and GCP environments. Conducts security reviews targeting IAM misconfigurations and exposed services. Uses cloud-specific exploitation tools and techniques to identify privilege escalation paths and data exfiltration vectors.

Conducts cloud security assessment: multi-service audit (IAM, networking, encryption, logging), compliance checks (CIS Benchmarks). Configures automated scanning with Prowler/Checkov.

Monitors cloud environments using SIEM platforms and CloudTrail analysis. Conducts security reviews of cloud resource configurations. Uses cloud-native detection tools to identify suspicious activity, analyze security events, and escalate confirmed threats for incident response.

Designs cloud infrastructure security architecture: multi-account strategy with security hub, centralized logging through CloudTrail + S3 + Athena, GuardDuty for threat detection. Implements CSPM (Cloud Security Posture Management), configures automatic remediation through Lambda and designs cross-account access patterns.

Expertly applies cloud security for network engineering to design complex systems. Optimizes existing solutions and prevents architectural mistakes. Conducts code reviews and trains colleagues on best practices.

Designs cloud penetration testing methodologies for complex multi-account AWS/Azure/GCP environments. Conducts threat modeling of cloud architectures to identify attack surfaces. Integrates offensive security findings into SDLC processes and mentors junior pentesters on cloud exploitation techniques.

Designs cloud security testing program: continuous compliance monitoring, infrastructure-as-code security (tfsec, Checkov), multi-cloud assessment. Implements custom checks.

Designs cloud threat detection strategies using advanced SIEM correlation rules and CloudTrail analytics. Conducts threat modeling for cloud-hosted services. Integrates cloud incident response playbooks into the SDLC and mentors analysts on cloud forensics and threat hunting techniques.

Designs secure cloud architectures following the Well-Architected Framework security pillar and zero-trust principles. Conducts threat modeling of distributed cloud systems. Integrates security guardrails into infrastructure-as-code pipelines and mentors teams on secure cloud design patterns.

Defines cloud security standards for the organization: baseline security controls for each account type, IAM role standards, data encryption policies. Reviews team security architectures, implements security guardrails through SCPs and Terraform modules, defines SLO for vulnerability time-to-remediate.

Establishes cloud security standards for the network engineering team and makes architectural decisions. Defines the technical roadmap incorporating this skill. Mentors senior engineers and influences practices of adjacent teams.

Defines offensive cloud security strategy across AWS, Azure, and GCP attack surfaces. Establishes penetration testing policies and red team engagement rules for cloud infrastructure. Coordinates response to critical cloud vulnerabilities discovered during assessments and trains teams on cloud exploitation frameworks.

Defines cloud security testing standards: mandatory assessments per account, compliance framework (SOC2, ISO 27001), reporting requirements. Coordinates with cloud engineering.

Defines cloud security monitoring strategy using SIEM, CloudTrail, and cloud-native detection services. Establishes cloud security policies and alert triage procedures. Coordinates cloud incident response across distributed teams and trains analysts on cloud threat intelligence and forensic investigation methods.

Defines secure cloud architecture strategy based on zero-trust principles and the Well-Architected Framework security pillar. Establishes security policies for multi-cloud deployments. Coordinates incident response at the infrastructure level and trains engineering teams on secure cloud design and compliance requirements.

Shapes company cloud security strategy: Security Operations Center architecture for cloud, compliance framework (SOC2, ISO27001, PCI DSS), vendor risk management. Defines roadmap for CNAPP, zero-trust architecture and cloud-native SIEM, coordinates with auditors and regulators.

Shapes cloud security strategy for network engineering at the organizational level. Defines best practices and influences technology choices beyond their own team. Is a recognized expert in this area.

Defines enterprise offensive security strategy for cloud environments across all major providers. Shapes red team architecture and advanced cloud exploitation research programs. Coordinates compliance of penetration testing practices with regulatory frameworks and represents the organization in offensive security communities and conferences.

Designs cloud security assurance: continuous compliance platform, multi-cloud security governance, automated remediation. Defines organizational cloud security strategy.

Defines enterprise cloud security monitoring and detection strategy across multi-cloud environments. Shapes security operations architecture including SOC modernization for cloud workloads. Coordinates compliance with industry security standards and represents the organization in cloud security threat intelligence sharing communities.

Defines enterprise secure cloud architecture strategy with zero-trust frameworks across multi-cloud and hybrid environments. Shapes organization-wide security architecture governance and reference designs. Coordinates compliance with regulatory and industry security standards and represents the organization in cloud security architecture forums.