Hey everyone,
I have a final interview lined up for a Cloud Security Engineer position at a digital asset/crypto company. The job mainly involves working with Terraform, AWS, Azure, SAST, and a few other security-related areas.
I'm curious if these roles are typically hands-on. My background is primarily in DevOps, Platform, and SRE, so I'm worried about feeling stagnant or getting stuck in a role that doesn't challenge me. I want to transition to DevSecOps, and during one interview, the hiring manager hinted that this position is along those lines. However, I have concerns about potentially becoming a bottleneck for deployments or application security.
Does anyone have experience in this field? I know it can vary by company, but I'd appreciate any insights you might have!
Thanks!
3 Answers
You might want to prepare for things like security training and even some hands-on tasks that involve awareness of data protection and configuration. A significant number of security breaches in the past have been due to poor practices in these areas, so being proactive can be quite valuable.
It's great that you've got an interview! Honestly, I'd suggest asking specifically about the hands-on aspects in your interview. Every company has different expectations for their roles, especially in security. Some places focus more on compliance and oversight rather than active development, while others expect you to be deeply involved in securing the entire deployment process.
Honestly, if the company has a cloud security engineer role, make sure to clarify how much of the role involves actual security implementation versus just oversight. It’s important to know if you’ll be able to work dynamically or end up as a gatekeeper for everything.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures