Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)

Cloud CyberSecurity Engineer - Hybrid (Houston or Dallas TX)AECOM is seeking a Cloud Security Engineer to join the Cybersecurity Engineering team, responsible for driving and enforcing security outcomes across a global multi-cloud environment spanning AWS, Microsoft Azure, and Microsoft m365. This role focuses on defining control requirements, identifying risk, and ensuring remediation of cloud security issues in partnership with Infrastructure and Application teams, who perform hands-on implementation. This position offers flexibility for a hybrid work schedule, combining in-office and virtual work, and must be based in Dallas or Houston, TX.Key Responsibilities:Perform Cloud Security Posture management (CSPM)Utilize Palo Alto Prisma Cloud and Qualys TotalCloud to identify misconfigurations, vulnerabilities, and deviations from baselineDefine and initiate remediation requirements for Infrastructure and Application teamsTrack and drive remediation efforts to closurePartner with Security Architecture to translate cloud security standards into actionable control requirementsEnsure adherence to approved cloud security baselines and standardsSupport exception management and risk acceptance processes with Cybersecurity Architecture and Cybersecurity GRCDevelop and deliver reporting on cloud security posture and risk to Cybersecurity and IT leadershipCloud Visibility & Risk ManagementOwn visibility into cloud security posture across AWS and AzureDefine risk metrics, prioritization models, and reporting standardsImprove asset visibility and configuration awareness across cloud environmentsPartnership & EnablementPartner with Infrastructure and Application teams to ensure secure implementation of controlsProvide guidance on secure cloud practices aligned with enterprise standards (NIST, CIS)Collaborate with stakeholders to prioritize and address security risksCloud Logging & IntegrationSupport integration of cloud telemetry into enterprise logging and monitoring platformsEnhance visibility into cloud activity and control effectivenessProofpoint / Email Security (Secondary Responsibility)Provide backup support for Proofpoint Email GatewayAssist with policy updates, tuning, and troubleshooting mail flow issuesEnsure continuity of secure email operationsContinuous ImprovementDrive continuous improvement of cloud security processes, tooling, and reportingStay current with evolving cloud threats and technologiesQualificationsMinimum Requirements:Bachelor's degree (BA/BS) and at least 6 years of information technology / cybersecurity experience with cloud security focus or demonstrated equivalency of experience and/or educationExperience with AWS and Microsoft Azure environmentsExperience with CSPM/CNAPP tools (Prisma Cloud, Qualys TotalCloud, CrowdStrike Cloud Security, or similar)Strong understanding of cloud security concepts, IAM, and network securityExperience managing and driving remediation of security issuesPreferred Qualifications:Strong communication and stakeholder management skillsExperience with Proofpoint Email Protection or similar platformsExperience with SIEM/logging integrationsFamiliarity with Infrastructure-as-Code conceptsUnderstanding of NIST, CIS, ISO 27001Cloud security certifications (AWS, Azure) highly preferredExperience in large enterprise environmentsAdditional InformationRelocation assistance is not available for this positionSponsorship for US work authorization is not available for this position, now or in the futureAt AECOM, we are committed to maintaining a secure and trustworthy recruitment process and take any fraudulent hiring activity seriously. To support this commitment, all newly hired employees are required to attend an in-person Day 1 onboarding at an AECOM office location as a condition of employment.