Cloud Security Engineer

Candidate Requirements
Cloud Security Engineer with the following qualifications:
Candidate must be available to perform services during standard Eastern Time business hours.
• Minimum of three (3) years of hands-on experience securing AWS and Microsoft Azure environments.
• Experience implementing cloud security best practices across multi-cloud environments.
• Experience securing Kubernetes (EKS) and Amazon ECS Fargate container workloads.
• Hands-on experience with Splunk for security monitoring, log analysis, and cloud security investigations.
• Experience implementing DevSecOps practices and securing CI/CD pipelines, including source code, dependency, Infrastructure-as-Code (IaC), and secrets scanning.
• Experience identifying, analyzing, and remediating Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM) findings in AWS and Azure environments.
• Experience with AWS Security Hub, AWS GuardDuty, Microsoft Defender for Cloud, CNAPP platforms, and vulnerability management tools such as Tenable.
• Experience performing cloud security architecture reviews and Infrastructure-as-Code (Terraform/CloudFormation) security reviews.
• Experience securing Microsoft Entra ID and AWS IAM through conditional access, IAM roles and policies, least-privilege access, and cross-account access controls.
• Strong analytical, documentation, communication, and problem-solving skills with the ability to work independently.


Primary Responsibilities
• Provide services primarily in support of enterprise cloud security initiatives, including the following:
• Secure AWS and Microsoft Azure environments by implementing cloud security best practices.
• Monitor and investigate cloud security events using Splunk and cloud-native security tools.
• Review, analyze, and remediate CSPM and CIEM findings, including IAM permissions, excessive privileges, and cloud misconfigurations.
• Secure Kubernetes (EKS) clusters and Amazon ECS Fargate container workloads.
• Implement security controls throughout CI/CD pipelines, including code, dependency, IaC, and secrets scanning.
• Perform cloud security architecture reviews, IAM assessments, and Infrastructure-as-Code security reviews.
• Utilize AWS Security Hub, GuardDuty, Microsoft Defender for Cloud, CNAPP platforms, and Tenable to identify and mitigate security risks.
• Prepare documentation of security findings, remediation recommendations, and technical procedures, and collaborate with engineering teams to resolve complex cloud security issues.
• Develop technical documentation and provide knowledge transfer to other security analysts, as needed.


Minimum Requirements / Education
• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or an equivalent combination of education and work experience.
• Minimum of three (3) years of experience in cloud security engineering or cloud security operations.
• Hands-on experience securing AWS and Microsoft Azure environments.
• Experience with enterprise cloud security tools and DevSecOps practices.
• AWS, Azure, CISSP, CCSP, or other relevant cloud security certifications are preferred.