Cloud Security Engineer

Cloud Security Engineer

This is a remote position. Job Description: Cloud Security Engineer – 5+yrs Summary We are looking for an experienced Cloud Security Engineer to support and enhance the security posture of multi-cloud environments. This role focuses on cloud security operations, monitoring, incident response, and implementation of best practices across cloud, endpoint, and email security domains.

Key Responsibilities

• Security Findings & Remediation Documentation
• Analyze and document cloud, email, endpoint, and security monitoring findings.
• Produce clear and actionable documentation covering:
• Risk assessment and severity classification
• Impact analysis
• Recommended remediation actions
• Maintain findings documentation within ticketing systems, reports, or other designated platforms.
• Alert Triage & Investigation
• Triage, investigate, and classify security alerts across cloud and security platforms.
• Maintain complete and accurate investigation records, including:
• Analysis performed
• Containment or mitigation actions (if applicable)
• Escalation details
• Final alert disposition
• AI Security in Cloud Environments
• Secure AI/ML workloads deployed in cloud environments, including training pipelines, data storage, and inference endpoints.
• Monitor usage of AI services (including third-party AI APIs) for anomalies, misuse, or unauthorized access.
• Collaborate with engineering teams to ensure secure deployment of AI services following cloud security best practices.
• Contribute to governance and policy development for responsible and secure AI usage in the cloud
• Configuration & Security Posture Assessment
• Conduct secure configuration reviews across cloud environments.
• Perform IAM assessments and analyze CSPM findings.
• Document posture assessment results and provide recommendations for security posture improvements.
• Support continuous monitoring and tuning of cloud security controls.
• Security Automation & Tooling
• Design, develop, and maintain security automation scripts and workflow enhancements.
• Create automation artifacts using scripting languages such as Python.
• Provide sufficient documentation and usage notes to enable ongoing operation and maintenance by internal teams.
• Build cloud security infrastructure using infrastructure as code tools such as Terraform
• Operational Metrics & Reporting
• Prepare periodic cloud security operational reports, including:
• Alert volumes and trends
• Remediation progress
• Posture improvements
• Tool tuning and optimization efforts
• Present concise status updates to stakeholders as requested.
• Incident Response Support
• Support investigation and response to security incidents impacting cloud environments.
• Contribute to incident reports, investigation summaries, timelines, and technical analysis.
• Assist with root-cause analysis and corrective action recommendations.

Required Skills & Qualifications

• Bachelor's degree in computer science, Cybersecurity, or related field
• 5+years of experience in Cloud Security / Security Operations.
• Hands-on experience with AWS, Azure, GCP, or OCI security services.
• Strong knowledge of IAM, network security, and cloud-native security controls.
• Experience with CSPM tools and EDR platforms like Crowdstrike.
• Familiarity with SIEM tools and incident response processes.
• Hands-on experience with identity-aware access solutions such as Teleport (or similar platforms) for secure access to infrastructure and services.
• Proficiency in scripting languages like Python.
• Foundational understanding of securing AI/ML workloads in cloud environments (e.g., model access control, API security, data protection).

Preferred Qualifications

• Certifications such as AWS Security Specialty, Azure Security Engineer, CCSP, or CISSP
• Experience with automation, SOAR platforms, or DevSecOps practices.
• Exposure to compliance frameworks (ISO 27001, SOC 2, etc.).
• Understanding of email security protocols (SPF, DKIM, DMARC).