Rubrik is seeking a Cloud Security Engineer who will be responsible for managing our cloud securityposture and limiting the attack surface of our public cloud environments to protect Rubrik brand,customers, and shareholders from cyber threats. The successful candidate will be technically savvy,customer-oriented, results-driven, and passionate about security. The candidate will partner withEngineering and other internal stakeholders in contributing to Rubrik’s overall security strategy.Responsibilities• Deploy and manage cloud security posture monitoring policies and develop automation tocontinuously scan cloud infrastructure for security threats.• Partner with Engineering teams across Rubrik to create secure cloud infrastructure design andmitigate the vulnerabilities in our public cloud environments (GCP, AWS, Azure).• Work with development teams, operations, governance, and other stakeholders to draft securitystandards for cloud services and implement monitoring to adhere to those standards.• Integrate security tools in the CI/CD process and work with development teams to mitigate thefindings.• Lead the security researcher program and facilitate the remediation of vulnerabilitiesin our cloudenvironments.• Design and implement custom solutions for automating the vulnerability management program.• Collaborate with other offensive security engineers in assessing the security posture of the cloudinfrastructure through penetration testing and red team exercises.• Drive vulnerabilities to closure within the established SLAs. Navigate escalations when necessaryto raise visibility into risk and drive the risk down when SLAs are not met.• Support incident responders in analyzing applicable threats, vulnerabilities, controls, and residualrisks.Ideal Background• Bachelor’s degree required; BE/BTech or MS in Computer Science, Information Technology, orrelated field• 5+ years’ experience in cloud security, with proven experience in AWS, Azure, or GCP• Experience in deploying and managing cloud security posture monitoring and securing cloudenvironments at scale• Working experience with CI/CD pipeline, containerization (Kubernetes, Docker, etc.) andmicroservices• Broad knowledge of application and cloud attack vectors and exploits• Subject matter expertise in encryption, IAM and authentication / authorization protocols• Penetration testing/ethical hacking/vulnerability management experience• Knowledge of network administration and understanding of all layers of the OSI model• Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, etc.
• Demonstrated programming skills in one or more of: Python, Perl, Ruby, Java• Cloud Security certifications in AWS, GCP or Azure is a plus• Excellent verbal and written communication skill
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are a leader in data security, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
Diversity, Equity & Inclusion @ Rubrik:
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture: