Cloud Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Enhance the security framework of the multi-cloud environment.

• Act as a reliable technical consultant for engineering, SOC, and executive stakeholders.

• Direct threat modeling and attack-path assessments for AWS and Azure.

• Perform security architecture evaluations and discovery sessions within enterprise AWS and Azure landscapes.

• Identify control deficiencies and assess the efficacy of current controls.

• Align adversarial actions with MITRE ATT&CK and CIS Critical Security Controls.

• Optimize AI-driven anomaly detection and behavioral analytics models to minimize false positives and enhance SOC triage precision.

• Collaborate with Solutions Architects, Cloud Engineering, and Application Security teams to establish secure deployment frameworks.

• Present evidence-based insights and security briefings to both technical and executive audiences.

• Address and resolve intricate multi-cloud security escalations comprehensively.

• Convert recurring control deficiencies into actionable insights for platform security roadmaps and broadened coverage in regulated settings.

⛳️ Requirements

• Over 2 years of practical cloud security experience with AWS and/or Azure.

• Proven expertise in threat modeling, attack-path analysis, and security architecture evaluations.

• Familiarity with MITRE ATT&CK, CIS Critical Security Controls, and the NIST Cybersecurity Framework.

• Experience with AI-driven or behavioral anomaly detection solutions (e.g., Darktrace, Vectra, ExtraHop, or similar).

• Solid understanding of IAM principles: least privilege, zero-trust architecture, and RBAC.

• Capacity to translate technical insights into prioritized, business-oriented recommendations for executive stakeholders.

• Relevant cloud certifications like AWS Cloud Practitioner (or higher) and Azure Fundamentals (AZ-900) or above.

• Vendor-specific detection or analyst certifications (e.g., Darktrace Cyber Analyst).

• Knowledge of privacy and compliance frameworks (CPRA, CPA, VCDPA, GDPR) and tools such as OneTrust.

• Experience engaging with regulated enterprise clients or in a customer-facing technical capacity.

• Familiarity with threat intelligence enhancement tools (e.g., VirusTotal or equivalent).

• Bachelor's degree in Information Security, Computer Science, Information Management, or equivalent practical experience.

🏝️ Benefits

• Significant investment in ongoing certification and conference participation.

• Competitive salary package.

• Equity options.

• Comprehensive benefits package.