Senior Cloud Security Engineer

Responsibilities

• Design and implement secure cloud architectures across AWS GovCloud, Azure, Google Cloud, and hybrid environments.
• Maintain compliance with NIST 800-53, FedRAMP, RMF, DoD Impact Levels, and Secure Cloud Computing Architecture requirements.
• Configure IAM, RBAC, JIT access, key vaults, and Zero Trust security principles.
• Deploy and optimize cloud security, CSPM/CWPP, SIEM, threat detection, monitoring, and response tools.
• Conduct vulnerability assessments, penetration testing simulations, configuration reviews, audits, and continuous monitoring.
• Develop and maintain SSPs, SARs, POA&Ms, risk reports, policies, standards, and security procedures.
• Investigate indicators of compromise, threat intelligence, alerts, and cloud security incidents; perform root-cause analysis and coordinate response activities.
• Integrate security controls into CI/CD pipelines and infrastructure-as-code practices using automation.
• Review cloud architectures, recommend security improvements, and provide subject-matter expertise, guidance, and training to engineering teams.
• Coordinate with configuration management teams on secure hardware and software changes and cyber-terrain documentation.

Requirements

• U.S. citizenship is required.
• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or five or more years of equivalent professional experience in cloud security engineering.
• Five to nine or more years of cloud security engineering experience in AWS GovCloud, Azure, Google Cloud, or multi-cloud environments.
• Hands-on knowledge of cloud security, IAM/RBAC, encryption, network security, logging, monitoring, container security, and Kubernetes security.
• Experience with SIEM platforms, vulnerability scanners, threat intelligence, security automation, infrastructure-as-code, Python or PowerShell scripting, and cloud-native security services.
• Experience with NIST, FedRAMP, RMF, Azure Sentinel, NESSUS, Burp Suite, Microsoft Defender, or equivalent tools.
• Relevant certifications such as CISSP, AWS Certified Security Specialty, AWS Certified Solutions Architect, Microsoft Certified: Security, Compliance & Identity, Security+, CEH, CySA+, GCIH, or related CSSP certification are listed as additional qualifications.
• Strong analytical, problem-solving, communication, and collaboration skills are required.
• Ability to work onsite five days per week at the Playa Vista, California office.

Benefits

• Equity participation in Apex.
• Company-paid medical, dental, and vision insurance for employees and dependents, plus $100,000 of life insurance at no cost.
• Paid time off starting at 15 vacation days and growing to more than 20 days annually, plus 10 paid holidays.
• 401(k) plan with a stated company match of 100% on the first 3% and 50% on the next 2%.
• Eight weeks of paid parental leave and childcare reimbursement up to $350 per day for work-related travel.
• Daily catered lunch, unlimited snacks, office socials, recreational activities, family gatherings, and an in-person Playa Vista office.
• Dream desk setup and required productivity tools.
• Full-time, onsite work five days per week in Playa Vista, California.