Nick McLaren, a Senior Cloud Security Engineer at an Enterprise, discusses the differences between working in a startup and an enterprise, the skills and mindset required to become a senior cloud security engineer, the importance of understanding cloud platforms and security tools, and perseverance and personal growth in the field.
Communication and the ability to explain technical tasks to non-technical stakeholders is a key skill for senior cloud security engineers.
Transitioning from a startup to an enterprise brings differences in roles and responsibilities, including the need for formal processes and dealing with challenges like silos and lack of trust.
Deep dives
Importance of Translating Technical Topics into Business Value
Being a senior level engineer in cloud security requires the ability to translate technical topics into business value. This includes creating reports based on certificate authorities and using Python scripts and cloud services like ECS and FarGate clusters. However, it's crucial to understand what the stakeholders, such as the CISO, need from these reports and the value they bring to the organization. Communication and the ability to explain technical tasks, timelines, and complexities to non-technical stakeholders is a key skill for senior cloud security engineers.
Differences Between Startups and Enterprises in Cloud Security Roles
Transitioning from a startup to an enterprise as a cloud security engineer brings distinct differences in roles and responsibilities. In startups, handling various tasks, such as identity access management and operations, is common, but in enterprises, duties are more segmented. The focus is often on building upon baseline tools and enhancing visibility and security. Project scope also differs, as startups may work on setting up initial compliance scans and dashboards, while enterprises require expanding features and improving visibility and data security. Silos, lack of trust, and the need for formal processes are challenges faced in enterprise environments.
Multi-Cloud Knowledge and Third-Party Tools in Senior Cloud Security Roles
Senior cloud security engineers in enterprises must have knowledge of more than one cloud provider, as enterprises often operate in multi-cloud environments. Understanding tools that are vendor-agnostic, such as Qualys and CloudGuard, is crucial. Third-party tools bridge gaps found in native cloud tools and allow for better reporting and compliance across multiple clouds. While deep knowledge of one cloud provider is essential, expertise in multiple clouds demonstrates versatility and makes senior engineers valuable assets to organizations.
Advice for Breaking into Cloud Security and the Importance of Automation
Breaking into cloud security requires a strong foundation in IT, which can be achieved through university programs, boot camps, or self-paced learning. Certifications should be used as a way to showcase specialization. Aspiring cloud security engineers should focus on learning Python, as coding and automation are highly valued skills. Practical experience, perseverance, and networking are key to success in the field. It is essential to stay up to date with evolving technologies, be a self-starter, and utilize research and networking to bridge knowledge gaps.
Nick McLaren is a Senior Cloud Security Engineer at an Enterprise and he transitioned to this role from a Cloud Security Engineer at a Startup. On this episode he shared with us, how the roles differ between an enterprise and startup, what skills you require to become a senior cloud security engineer and what a day look like in a life of cloud security engineer.
Thank you to our sponsors for the this episode
Vanta - You can check them out at vanta.com/cloud
Snyk - Check them out at Snyk.io/csp