Senior Cloud Security Engineer

Responsibilities

• Conduct hypothesis-driven threat hunts across AWS, Azure, GCP, and OCI using threat intelligence and the MITRE ATT&CK framework.
• Analyze cloud-native telemetry and SIEM data to investigate suspicious activity.
• Administer and optimize Qualys and Tenable vulnerability scanning across cloud tenants.
• Analyze vulnerability and configuration findings, prioritize remediation, and eliminate false positives.
• Lead vulnerability and threat remediation with engineering and patching teams and verify closure through rescanning.
• Identify and remediate cloud misconfigurations, excessive IAM permissions, exposed services, and STIG/CIS benchmark deviations.
• Develop detection rules, queries, and automated hunt playbooks.
• Support incident response through scoping, containment recommendations, and root cause analysis.
• Produce hunt reports, remediation tracking, and POA&M inputs and brief findings to customers, ISSOs/ISSMs, and leadership.
• Mentor junior security engineers in threat hunting, vulnerability analysis, and tool usage.

Requirements

• Bachelor’s degree and 12 years of experience, master’s degree and 10 years, associate’s degree and 14 years, or high school diploma/equivalent and 16 years of experience.
• At least 8 years of information security experience, including at least 5 years in cloud security engineering.
• Hands-on security experience with at least three of AWS, Azure, GCP, and OCI.
• Expertise with Qualys VMDR, Cloud Agent, and Policy Compliance, plus Tenable.io, Tenable.sc, and Nessus.
• Experience conducting threat hunts and investigations using the MITRE ATT&CK framework.
• Proficiency writing queries and analyzing logs in Splunk, Microsoft Sentinel, Elastic, or an equivalent platform.
• Experience remediating vulnerabilities and misconfigurations on Windows, Linux, containers, and cloud-native services.
• Deep knowledge of cloud IAM, network security, encryption, and logging architecture.
• Scripting or automation experience with Python, PowerShell, or Bash and familiarity with Terraform or Ansible.
• Working knowledge of STIGs, CIS Benchmarks, and NIST 800-53 controls.
• U.S. citizenship and ability to obtain and maintain a DHS Public Trust.
• Preferred certifications include CISSP, CCSP, GCIH, GCTI, GCFA, AWS Certified Security - Specialty, Microsoft AZ-500, or Google Professional Cloud Security Engineer.

Benefits

• Medical, dental, vision, life, health savings account, short- and long-term disability, EAP, parental leave, 401(k), paid time off, and company-paid holidays.
• Remote work is available, but the employee must reside and work within the United States.
• The position requires working online from 8:00 AM to 5:00 PM Eastern.