Cloud Security Engineer

Job DescriptionEverforth ECS is seeking aCloud Security Engineerto work in ourArlington, VA office/remote.We’relooking for a security engineer who understands vulnerability management as an end-to-end discipline. Not just scanning, but contextualizing findings,eliminatingfalse positives, and driving remediation outcomes across engineering,developmentand platform teams. You have hands-on experience operating security tooling across AWS and Azure, you can perform architecture reviews and deliver actionable guidance, andyou’recomfortable supporting ATO processes and continuous monitoring under RMF. You work well without heavy direction, you know how to prioritize risk in complex environments, and you can translate technical findings into clear reporting for both technical and executive audiences.You arecomfortablegiving technicalpresentations toleadership,thatresultsinunderstanding and acceptance.You arefamiliar withArtificial IntelligenceGPT prompting.WhatYou’llDoOwn vulnerability triage, validation, prioritization, and remediation tracking across cloud, on-prem, and application environmentsConduct authenticated and unauthenticated scans of web applications, APIs, servers, databases, and network devicesPerform risk-based analysis of findings including false positive validation, asset context evaluation, and remediation verificationPartner with platform, cloud, and application teams to drive sustainable remediation outcomesImplement,operate, and tune CSPM tools, vulnerability scanners, and application security tooling across AWS, Azure, and GCPPerform security architecture and design reviews covering IAM, encryption, logging, monitoring, and network controlsSupport static, dynamic, container, and dependency scanning and help dev teams understand and fix what’s foundPerform secure configuration reviews against DISA STIGs and other security baselinesAutomate vulnerability validation, remediation tracking, and control validation using Python, Bash, PowerShell, and TerraformManage certificate lifecycle including inventory, renewal tracking, and deployment coordinationSupport ATO activities, POA&M management, and RMF Step 6 continuous monitoringBuild andmaintainrunbooks, technical reports, executive dashboards, and risk summariesAssistduring security audits and incident response investigations involving vulnerable systemsProtypeandprovidetraining onnewtoolsandsolutions.Salary:$140,000 - $170,000General Description of BenefitsJob RequirementsMust have US citizenship.Ability to pass a Public Trust investigation.Bachelor's degree in a related field.7 years of overall IT experience, with at least3years focused specifically on cloud security or vulnerability managementCISSP, CISA, CISM, or relevant cloud provider certificationsrequiredHands-on scripting experience in Python, Bash, or PowerShellFamiliarity with compliance frameworks including SOC 2, CIS, NIST, or ISO 27001Understanding of CVEs, CWEs, CVSS scoring, and how to apply them in practiceExperiencegeneratingAIGPTpromptstheproducethe expectedoutputJob DetailsJob Type: Full-timeCategory: Cloud & InfrastructureSalaried: Salaried