• Lead the design, implementation, and maintenance of network security infrastructure • Build secure systems and manage engineering teams • Ensure compliance with security standards and alignment with company objectives • Support architecture, design, implementation, and operations of network and cloud infrastructure • Manage critical incidents and ensure reliable network operations including DDI, Firewall, VPN and load balancing • Provide technical leadership and coach junior members of the team

Role Description We are seeking a highly motivated and detail-oriented Cloud Security Engineer to help secure and strengthen our cloud infrastructure across multiple environments and platforms. This role is ideal for professionals passionate about cybersecurity, cloud architecture, risk mitigation, and implementing modern cloud security best practices. You will work closely with infrastructure, development, and IT teams to identify vulnerabilities, improve security posture, and ensure compliance with industry standards and cloud security frameworks. Key Responsibilities - Analyze, recommend, and implement security controls for cloud infrastructure - Strengthen security across cloud-based systems and services - Apply industry best practices and security standards in cloud environments - Review and validate network protocols, communication security, and existing security controls - Perform vulnerability assessments and identify security gaps across cloud infrastructure - Support remediation efforts for vulnerabilities, findings, and security risks - Implement secure configurations and hardening practices for cloud systems - Participate actively in cloud security initiatives and infrastructure projects - Evaluate and improve the organization's cloud security posture - Generate security reports, vulnerability assessments, and compliance documentation - Support external clients with cloud security recommendations and implementations Qualifications - Bachelor’s Degree in: Information Technology, Systems Engineering, Information Systems Administration, Related technical field - 3+ years of experience in: - Cloud Security - Cloud Infrastructure Administration - Cloud Platform Engineering - Strong knowledge of: - AWS, Azure, Google Cloud Platform (GCP) - Linux and Microsoft Operating Systems - Networking, Switching & Routing - Vulnerability Management - Security Hardening - Risk Analysis & Security Controls - Encryption Technologies - PCI, NIST, CIS Standards - Basic to intermediate programming knowledge - English proficiency: 80–95% Nice to Have - Cloud Security Certifications - AWS / Azure / GCP Certifications - Experience supporting enterprise cloud environments - Knowledge of DevSecOps practices - Experience with database security and infrastructure design Benefits - 100% Remote Contractor Position - US Holidays - 15 PTO Days - Annual Pluralsight Membership - Company-Provided Computer - Monthly Payments via Deel Company Description This is an exciting opportunity to work on modern cloud security initiatives, protect enterprise-level infrastructure, and collaborate with global teams in a fast-paced and security-focused environment.

• Ensure Amcor has the proper visibility, detection, and protection to secure the organization. • Provide strategic input on the IT security roadmap and delivery of our comprehensive security strategy. • Responsible for global information security design and integration to ensure technology implementations are configured securely and appropriately. • Implement, manage, and maintain our information security tools and technologies. • Work at the direction of IT Security Manager. • Key contributor in global IT security strategy including metrics, program improvements, and innovative ways to mitigate business risk while improving security. • Play a key role in the identification, assessment, prioritization and remediation processes of cyber security risks and vulnerabilities. • Participate in the construction of strategic roadmaps to harden systems and close vulnerabilities. • Drive policy improvements and own technical recommendations for policy adjustments. • Evaluate current or emerging technologies to ensure proper alignment with global security strategy. • Support response to security incidents which may include on-call and availability outside of standard business hours.

• Your primary role is to perform penetration testing of web applications, mobile applications, thick clients, and APIs. • Source code review and whitebox penetration testing to prove the impact of application flaws. • Reverse engineering of mobile and thick client applications. • You sometimes chain application flaws to other areas, such as cloud and on-prem AD infrastructure. • Opportunities for lateral movement into the infrastructure teams are limited and given at the manager's discretion. • Develop detailed reports on findings and remediations for impactful findings. • You will learn to debrief these findings at both a technical and executive level. • Perform SAST and DAST on enterprise, SaaS, and custom in-house applications. • Experience in using scanners and knowledge of validation and elimination of false positives. • A strong understanding of OWASP in Web, API, Mobile, and AI/LLM is necessary, but you will be asked to go beyond.