Security Engineer (Cloud & Vulnerability Management)

Join Nasuni, a leading provider of cloud file services. As a Security Engineer II, you will play a crucial role in protecting our hybrid and multi-cloud infrastructure. You will manage and operate tools and workflows for asset visibility, vulnerability management, and endpoint security. You will work within a supportive security team and have meaningful incident response responsibilities. This role requires participation in an on-call rotation and offers opportunities for professional growth and a comprehensive benefits package.

• Gérer et exploiter les outils et les flux de travail qui maintiennent nos environnements cloud, sur site et de point de terminaison compris, évalués et durcis.
• Exécuter et améliorer continuellement les processus de gestion des vulnérabilités, de visibilité des actifs et de sécurité cloud.
• Collaborer avec les équipes d'ingénierie, SRE et IT/Infrastructure pour conduire les activités de remédiation.

• Hands-on experience managing vulnerability scanning or asset management programs in a cloud or hybrid environment
• Experience prioritizing vulnerabilities using risk-based methodologies and business context
• 3–6 years of experience in security engineering, cloud security, vulnerability management, or a closely related role
• Experience coordinating remediation efforts across Engineering, Infrastructure and/or IT teams
• Experience using AI-enabled tools to improve operational efficiency, analysis, investigation, or reporting while applying appropriate validation and security controls
• Strong written and verbal communication skills. Able to translate vulnerability findings into clear, prioritized guidance for cross-functional partners
• Familiarity with secure configuration standards such as CIS Benchmarks and common vulnerability frameworks (CVSS, CVE)
• Experience with cloud security platforms, ideally including Wiz or a comparable CSPM tool; familiarity with AWS, Azure, or GCP security fundamentals
• Collaborative and reliable partner across engineering, IT/infrastructure, and security teams
• Ownership mindset: you follow through on commitments, track your own work, and raise blockers early
• Working knowledge of network protocols, network security fundamentals, and infrastructure security concepts (TCP/IP, firewall logic, segmentation)
• Hands-on experience with vulnerability management tools such as Rapid7 InsightVM, Qualys, Tenable, or equivalent
• Certifications preferred: CompTIA Security+, AWS Security Specialty, CySA+, or equivalent
• Bachelor's degree in Information Security, Computer Science, or a related field; or equivalent practical experience