Cloud Security Engineer

Cloud Security EngineerEverforth ECS is seeking a Cloud Security Engineer to work in our Washington, DC office / remote. The role is contingent upon additional funding.We are seeking a technically skilled and security-focused Cloud Security Engineer to join our security operations division — a full-spectrum cybersecurity organization covering endpoint protection, event monitoring, threat intelligence, and advanced incident response. This is a hands-on engineering role, not an architecture or design position. You will be in the environment every day, operating and improving the security controls that protect the organization's cloud and web-based assets while maintaining and hardening the Linux server infrastructure that supports them.Your work spans two equally important disciplines. On the cloud and web side, you will plan, implement, and monitor security measures across enterprise cloud platforms, analyze cloud services and APIs for risk, and develop the detection and response procedures that keep those environments safe. On the Linux side, you will bring deep system-level expertise to ensure that server infrastructure is securely configured, actively monitored, and thoroughly documented.This role is a strong fit for someone who is equally at home in a cloud console and a Linux terminal and who brings a security operations mindset to both.Salary Range: $120,000 - $130,000 General Description of BenefitsCloud & Web SecurityProven experience planning, implementing, and monitoring security measures for enterprise assets hosted on cloud platforms such as AWS, Azure, or GCPAbility to analyze cloud services, APIs, and log payloads to ensure they meet industry security standards and organizational requirementsExperience developing and maintaining standard operating procedures for cloud-based security event handlingFamiliarity with cloud-native security tooling including Cloud Access Security Brokers (CASBs), Cloud Security Posture Management (CSPM), and cloud workload protection platformsExperience with cloud architectures including SaaS and PaaS, and common commercial platforms such as Google Workspace, Microsoft 365, and AWSUnderstanding of web application security concepts including OWASP vulnerabilities, API security, and web application firewall (WAF) managementExperience with cloud IAM frameworks, role-based access control, and Zero Trust Architecture as applied to cloud environmentsAbility to create custom detection mechanisms that correlate log sources across cloud environments to surface potential intrusionsLinux ServerStrong hands-on experience administering and hardening Linux server environments in an enterprise settingProficiency with Linux security tooling, system logging frameworks, and monitoring utilitiesExperience reviewing system and application logs, identifying anomalies, and taking appropriate corrective actionAbility to create and maintain thorough documentation for Linux-based systems, including installation, configuration, and troubleshooting proceduresExperience supporting security continuous monitoring efforts including vulnerability management, system patching, and risk assessments within Linux environmentsWorking knowledge of network protocols, firewall management, and secure server configuration in Linux-based infrastructureSecurity Operations & CollaborationAbility to identify capability gaps and recommend improvements at both the technical and process levelExperience contributing to the development of detection standards, security procedures, and operational documentationAbility to collaborate across teams including cybersecurity, networking, systems administration, and technology support partnersComfortable communicating technical findings and risk clearly to both technical peers and senior leadershipA minimum of 5+ years of experience in information technology or cybersecurity is required, with at least 3+ years of direct, hands-on experience implementing or supporting cloud-based security. Candidates with demonstrated experience across both cloud security operations and Linux server administration in an enterprise environment will be strongly preferred.