Senior Cloud Systems Engineer - Cyber Security

Summary Statement: You will be working with a team of experts to create solutions for all of Penske’s security needs. Position is hybrid remote and will require a minimum of 2 days a week working out of the Penske offices in Reading, PA. Candidates must reside within a reasonable commuting distance to Reading, PA. What you will be doing: As a Penske Systems Engineer – Cyber Security, you will provide hands-on security engineering expertise across cloud and enterprise environments.

A primary focus of this role will be cloud security, including evaluating cloud architectures, implementing security controls, identifying and reducing risk, and partnering with infrastructure, application, and cloud teams to securely enable new capabilities. You will bring strong hands-on cloud security expertise while applying security principles across cloud environments.

Over time, you will also contribute to the broader responsibilities of the Cyber Security Engineering team, including security architecture, vulnerability management, identity and access management, network security, security monitoring, and other security technologies and initiatives. Penske Responsibilities: Design, implement, and maintain security controls across cloud environments.

Perform cloud security architecture reviews and provide security guidance for new and existing cloud solutions. Assess cloud environments for security risks, misconfigurations, vulnerabilities, excessive permissions, and opportunities to improve security posture. Support identity and access management, least privilege, logging and monitoring, network security, data protection, vulnerability management, and configuration management within cloud environments.

Partner with cloud, infrastructure, application, and development teams to integrate security into the design and implementation of cloud solutions. Support automation and Infrastructure as Code (IaC) approaches for implementing and maintaining cloud security controls. Evaluate and recommend cloud security technologies and improvements based on evolving threats and industry practices.

Contribute to broader cybersecurity engineering responsibilities and technologies beyond cloud security as team priorities evolve. Define, implement, and promote security policies, standards, and technical controls to protect company systems and information. Provide security reviews and help define security architectures and models for new and existing systems.

Evaluate and recommend security technologies and improvements based on business requirements, risk, and effectiveness. Implement and maintain security capabilities across network, endpoint, server, application, and other enterprise environments. Support security monitoring, vulnerability management, access controls, logging, and threat detection capabilities.

Support compliance and audit activities, including access reviews and security control validation. Collaborate with teams across IT to identify security requirements, resolve issues, and implement secure solutions. Participate in multiple large-scale and cross-functional security initiatives and projects. Mentor and provide technical guidance to other security team members and partners.

Develop, test, and maintain security procedures, documentation, and recovery or emergency measures. Penske Qualifications: Bachelor’s degree or equivalent experience required; advanced degrees or certifications preferred. 6+ years of cybersecurity engineering or closely related technical security experience. Strong hands-on cloud security engineering experience.

Experience securing cloud environments across areas such as identity and access management, network security, logging and monitoring, vulnerability management, data protection, configuration management, and security architecture. Experience evaluating cloud security posture and identifying and remediating security risks and misconfigurations.

Experience with Infrastructure as Code (IaC), automation, or Dev. Sec. Ops practices preferred. Experience with cloud-native security capabilities and/or CSPM/CNAPP technologies preferred. Ability and willingness to work across broader cybersecurity technologies and disciplines beyond cloud security. Strong collaboration, documentation, and communication skills.

Cybersecurity and/or cloud security certifications preferred (CISSP, CISM, CCSP, etc.) Regular, predictable, full attendance is an essential function of the job Willingness to travel as necessary, work the required schedule, work at the specific location required, complete Penske employment application, submit to a background investigation (to include past employment, education, and criminal history) and drug screening are required.

EEO Statement Penske is an Equal Opportunity Employer. Physical Requirements:

• The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
• The associate must regularly lift and /or move up to 25lbs/12kg.
• Specific vision abilities required by this job include Close vision, Distance vision, Peripheral vision, Depth perception and Ability to adjust focus.
• While performing the duties of this Job, the associate is regularly required to stand; walk; sit and talk or hear. The associate is frequently required to use hands to finger, handle, or feel and reach with hands and arms.