Cloud Security Engineer

• Design, implement, and maintain security controls across AWS, Azure, GCP, and OCI, including IAM, network segmentation, encryption, key management, and logging.
• Own the deployment, tuning, and day-to-day operation of CNAPP platforms (such as Palo Alto Cortex Cloud, Wiz and/or Orca)
• Assessment, development & implementation, operationalization and

documentation of a comprehensive and broad set of security, data protection, cryptography, key management, identity and access management (IAM), network security) within IaaS and PaaS, and other cloud environments.

• Manage CSPM, CWPP, CIEM, DSPM, vulnerability management, and container/Kubernetes security capabilities.
• Triage and prioritize findings by risk and attack path; drive remediation with application and platform teams, and track SLAs and risk reduction metrics.
• Build custom policies, detection rules, and automated remediation workflows.
• Integrate security into CI/CD pipelines: IaC scanning (Terraform, CloudFormation, ARM), SAST/SCA, secrets detection, and container image scanning.
• Integrate cloud-native telemetry with the SIEM/SOAR platform.
• Map cloud controls to frameworks and standards such as CIS Benchmarks, NIST, ISO 27001/27017 and other applicable regulations
• Support audits and produce evidence, and maintain security documentation, standards, and runbooks.
• Report on security posture, risk trends, and KPIs
• Partner with cloud platform, DevOps, SRE, and application teams as a trusted security advisor.

• 5+ years of experience in cloud security.
• Hands-on experience in at least one cloud - AWS, Azure, GCP, and OCI, with knowledge of the others.
• Experience with at least of the leading CNAPP tools - Cortex Cloud, Wiz, Prisma Cloud or Orca to safeguard the cloud environment
• Strong understanding of cloud IAM, network security, encryption/KMS, secrets management, and logging/monitoring.
• Experience with Infrastructure as Code (Terraform preferred) and security scanning of IaC.
• Scripting/automation skills in Python, Bash, or PowerShell; familiarity with APIs and event-driven automation.
• Familiarity with security frameworks and benchmarks (CIS, NIST CSF, ISO 27001, MITRE ATT&CK for Cloud).
• Strong communication skills, with the ability to explain risks to both technical and non-technical stakeholders.
• Strong interpersonal and communication skills; ability to work in a team environment.
• Ability to work independently with minimal direction; self-starter/self-motivated

• Certifications such as AWS Certified Security - Specialty, AZ-500, Google Professional Cloud Security Engineer, OCI Security Professional, CCSP and/or CISSP.
• Strong expertise in GCP services (i.e. Cloud Services Platform, Google Kubernetes Engine, Compute Engine, Cloud Interconnect)
• Experience with SIEM/SOAR tools (XSOAR, Splunk, Sentinel, Chronicle).
• Exposure to containers and Kubernetes security.
• Exposure to Zero Trust, data security/DSPM, and API security.

This role is eligible to participate in Marvell's bonus and equity plans, including a new hire equity grant and annual equity refreshers, ensuring you are rewarded for your contributions and remain invested in the company's long-term success.