Senior Cloud Security Engineer

Overview

As a Senior Cloud Security Engineer , you will work with our team and clients to design, implement, and maintain secure cloud environments and architectures. You will support cloud security across the system lifecycle, including security architecture, identity and access management, vulnerability management, data protection, continuous monitoring, and the implementation of cloud security controls.

We are looking for an experienced cloud security professional with strong hands-on experience securing AWS environments and implementing cloud-native and third-party security solutions. The ideal candidate will bring strong analytical and problem-solving skills and the ability to collaborate across technical teams to identify risks, implement security controls, and continuously improve the security posture of cloud environments.

Responsibilities

Responsibilities include:

• Design and implement secure cloud architectures and technical solutions with security requirements incorporated throughout the system lifecycle.

• Identify and implement secure cloud-based solutions, including components supporting zero-trust architectures, identity and access management, and data protection.

• Implement and maintain identity and access management (IAM) controls, including authentication, authorization, and least-privilege access.

• Assess and harden cloud environments, configurations, authentication mechanisms, and authorization controls.

• Identify, assess, document, and track vulnerabilities and cloud security risks across systems and environments.

• Partner with cloud engineers, software engineers, DevSecOps engineers, cybersecurity teams, and other technical stakeholders to prioritize and remediate vulnerabilities and security weaknesses.

• Implement and support cloud security posture and application protection capabilities to identify misconfigurations, vulnerabilities, excessive permissions, and other cloud security risks.

• Monitor cloud environments for suspicious activity using cloud-native monitoring, SIEM, and other security solutions and investigate security events as appropriate.

• Conduct risk assessments, threat modeling, and security testing to identify and mitigate cloud security risks.

• Automate security processes, including vulnerability management, configuration assessment, and other cloud security activities.

• Support enterprise cloud security through infrastructure as code, including automated server and network configurations, large-scale deployments, monitoring, and testing.

• Evaluate infrastructure as code and cloud configurations to identify security risks and recommend appropriate remediation.

• Design and implement data protection and encryption mechanisms for data at rest and in transit.

• Document the as-is state of cloud environments, perform gap analyses, and produce artifacts that articulate options and recommendations.

• Evaluate technical changes and cloud configurations for potential security impacts.

• Provide technical guidance and mentorship to junior team members.

• Engineer and implement cloud security solutions and provide recommendations for continuous improvement.

• Present regular status updates and provide cross-training to other team members.

• Maintain awareness of evolving cloud vulnerabilities, threats, security technologies, and cloud security engineering practices.

Qualifications

• Ability to obtain and maintain a U.S. government security clearance.

• Bachelor's degree and 10+ years of total experience.

• 5+ years of experience architecting, designing, developing, implementing, or securing cloud solutions.

• 5+ years of experience with cloud platforms, including AWS.

• Experience implementing cloud security architecture, controls, and security best practices in AWS environments.

• Experience with Cloud-Native Application Protection Platform (CNAPP) or Cloud Security Posture Management (CSPM) solutions.

• Experience with identity and access management (IAM), authentication, authorization, and least-privilege security principles in cloud environments.

• Experience identifying, assessing, tracking, and supporting remediation of cloud vulnerabilities and security misconfigurations.

• Experience conducting security monitoring, risk assessments, threat modeling, and security testing in cloud environments.

• Experience implementing or supporting continuous security monitoring and vulnerability management processes.

• Experience with infrastructure as code and orchestration.

• Experience analyzing technical security findings and identifying appropriate remediation or risk mitigation actions.

• Experience collaborating across cloud, DevSecOps, software engineering, and cybersecurity teams to implement and maintain security controls.

• Strong analytical, troubleshooting, problem-solving, communication, and collaboration skills.

• Current AWS certification.

Preferred:

• Experience with Wiz, Palo Alto Cortex, or similar cloud security platforms.

• Experience with Data Security Posture Management (DSPM) tools and practices.

• Certified Information Systems Security Professional (CISSP) or other relevant cybersecurity certification.

• Experience working within federal government or other highly regulated environments.

• Knowledge of federal cybersecurity requirements, security controls, and continuous monitoring practices.

• Experience documenting an as-is state of the environment, performing gap analyses, and producing artifacts that articulate options and recommendations.

• Experience with scripting in Bash, PowerShell, Python, Groovy, Ruby, or similar languages.

• Experience with automation and infrastructure-as-code tools such as Chef, Terraform, CloudFormation, or Ansible.