Cloud Security Engineer

Cloud Security Engineer

Camping World Holdings, Inc., headquartered in Lincolnshire, IL, (together with its subsidiaries) is America’s largest retailer of RVs and related products and services. Our vision is to build a long-term legacy business that makes RVing fun and easy, and our Camping World and Good Sam brands have been serving RV consumers since 1966.

We strive to build long-term value for our customers, employees, and shareholders by combining a unique and comprehensive assortment of RV products and services with a national network of RV dealerships, service centers and customer support centers along with the industry’s most extensive online presence and a highly trained and knowledgeable team of employees serving our customers, the RV lifestyle, and the communities in which we operate. We also believe that our Good Sam organization and family of programs and services uniquely enable us to connect with our customers as stewards of the RV enthusiast community and the RV lifestyle. With RV sales and service locations in 42 states, Camping World has grown to become the prime destinations for everything RV.

The Cloud Security Engineer is a critical member of the Online, Applications, Cloud and AI Security team. The Engineer's role is to act as a technical bridge between the security leadership's strategic requirements and the hands-on implementation of security controls within the company's cloud infrastructure. The Engineer must be able to translate high-level IT-risk requirements into technical cloud security specifications, as well as develop automated metrics for ongoing performance measurement and reporting.

This is a technical leadership role that requires an individual with a strong background in cloud-native technologies, as well as an ability to work with the broader IT organization to align security configurations with key business objectives. The Engineer will act as an expert technical representative during cloud planning initiatives to ensure that security measures are incorporated into the architecture and that service expectations are clearly defined. The role is responsible for balancing real-world security risks with business drivers such as speed, agility, and performance in a DevOps environment.

Expertise in managing technical security projects and engineering automated solutions is essential for success in this role. In addition to supporting the Information Security policies, the Cloud Security Engineer must be able to prioritize technical efforts—balancing cloud security controls definition, immediate detection and remediation tasks with longer-term architectural security improvements. Documentation skills, analytical thinking, and the ability to identify cloud security gaps and take initiative are key requirements of the position.

Responsibilities:

The Cloud Security Engineer's job is composed of a variety of tactical and operational activities in support of the cloud security program, including:

• Work with the IT Online, Applications, Cloud and AI Security Director and the broader security and IT leadership stakeholders to implement technical security projects that address identified risks in cloud environments.

• Assist resource owners and IT staff in understanding and responding to security audit failures and cloud configuration vulnerabilities.

• Manage production security issues and incidents within cloud platforms, participating in problem and change management forums.

• Work with stakeholders to identify cloud-based information asset owners and classify data and systems within the control framework.

• Provide technical support and guidance for legal and regulatory compliance efforts, specifically regarding data residency and cloud governance.

• Consult with IT and engineering staff to ensure that security is factored into the selection and configuration of cloud services and applications.

• Design and implement technical controls to support and enforce defined security policies in AWS, Azure, or GCP.

• Research, evaluate, and test new cloud security hardware or software, analyzing its impact on the existing hybrid-cloud environment.

• Provide technical expertise for the administration of security tools, such as Cloud Workload Protection Platforms (CWPP) and Cloud Security Posture Management (CSPM).

• Work with the enterprise architecture team to ensure the convergence of business, technical, and security requirements in the cloud.

• Manage technical security projects and provide expert guidance on security matters for other infrastructure and development projects.

• Assist the disaster recovery planning team in the selection of cloud-native recovery strategies and the testing of disaster recovery plans.

• Design and oversee security testing procedures, including automated vulnerability scanning and configuration audits, to verify the security of cloud systems.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field. Relevant certifications CISSP, CCSP, or cloud-provider specific security certifications (AWS/Azure/GCP) are a plus.

• A minimum of seven years of IT experience, with five years in an information security role specifically focused on cloud or network security.

• Experience with common information security management frameworks, such as ISO 27001, NIST CSF, or the CSA Cloud Controls Matrix.

• Strong understanding of network and system security principles, including firewalls, intrusion detection/prevention systems, and encryption.

• Experience with containerization technologies (e.g., Docker, Kubernetes) and securing containerized environments.

• Capability to develop and guide technical security initiatives with minimal supervision.

• Experience developing and maintaining technical security procedures, standards, and guidelines.

• Excellent problem-solving skills and the ability to analyze complex systems and identify security risks.

• Strong communication and collaboration skills, with the ability to work effectively in a team-oriented, fast-paced environment.

• Strong technical leadership skills and the ability to work effectively with business managers and IT operations staff.

• The ability to build strong relationships across all business units and understand business imperatives.

• Proficiency in performing risk, control, and vulnerability assessments in cloud-native environments.

• Strong analytical skills to analyze security requirements and relate them to appropriate technical security controls.

TRAVEL REQUIREMENTS:

Possibility of infrequent traveling.

General Compensation Disclosure

The pay range for this role considers several factors in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Camping World, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the factors stated. A reasonable estimate of the current range is listed below.

Pay Range:

In addition to competitive pay, we offer Paid Time Off, 401(k), an Employee Assistance Program, Good Sam Roadside Assistance, discounts, paid parental leave (if eligibility is met), Tuition Reimbursement (if eligibility is met), and on the job training opportunities. Full-time associates are offered a comprehensive benefit package including medical, dental, vision and more! Part-time associates are offered access to dental & vision coverage! For more information please visit: www.mycampingworldbenefits.com