Cyber Security Cloud Engineer

This is a fully remote position, open to applicants in Iowa, +1 more state.

📋 Description

• Implement and uphold security measures across Azure and AWS, covering identity and access management, network segmentation, encryption and key management, logging, and workload protection.

• Deploy and manage CSPM/CNAPP, infrastructure-as-code guardrails, policy-as-code, and automated compliance verifications.

• Operate and optimize Microsoft Defender for Cloud, Microsoft Sentinel, Entra ID Protection, AWS GuardDuty, Security Hub, CloudTrail, and IAM Access Analyzer.

• Integrate cloud telemetry into enterprise SIEM detection and response processes.

• Conduct detection engineering and incident response for threats related to cloud-hosted and identity-centric environments.

• Perform alert triage, investigation, root cause analysis, containment, and coordination of remediation efforts.

• Assist in cybersecurity due diligence for acquisitions and document gaps in the target environment.

• Execute secure identity, Microsoft 365, workload, network, endpoint, and legacy-infrastructure migrations for acquired entities.

• Maintain integration playbooks and security baselines with regular status updates.

• Implement security controls across CI/CD pipelines, including SAST/DAST, software composition analysis, secrets scanning, container image scanning, and SBOM generation.

• Support secure product development through threat modeling, secure design evaluations, secure coding standards, API security, and vulnerability management.

• Track product security metrics, keep developer documentation up to date, and manage remediation service level agreements (SLAs).

• Implement data protection, DLP, identity governance, and access controls for AI initiatives.

• Maintain security measures across Microsoft 365, identity management, Windows and Apple endpoints, and cloud environments.

• Generate evidence, metrics, and documentation for PCI-DSS compliance, NIST CSF alignment, audits, executive assessments, and customer security evaluations.

• Mentor engineers, act as an escalation point for complex cloud and identity security challenges, and report on control status, gaps, risks, and progress on remediation.

• Occasionally participate in after-hours incident response or maintenance activities.

• Travel occasionally to NCS facilities and locations of acquired companies.

⛳️ Requirements

• At least 5 years of progressive experience in IT, with extensive exposure to infrastructure, networking, identity, and enterprise systems.

• A minimum of 3 years of hands-on experience in a dedicated cybersecurity position, including securing production workloads in Microsoft Azure and/or AWS.

• Proven experience in implementing security controls within a well-defined enterprise security framework.

• Hands-on experience with cloud security services and architectures on at least one major platform (Azure or AWS), with familiarity with the other.

• Experience in IAM, network security, encryption and key management, logging, and workload protection.

• Proficient in infrastructure as code tools, such as Terraform, Bicep, or CloudFormation.

• Familiarity with CI/CD platforms, such as Azure DevOps, GitHub, or GitLab.

• Knowledge of application security tools, including SAST/DAST, SCA, secrets scanning, and container scanning.

• Working understanding of the NIST Cybersecurity Framework.

• Experience with PCI-DSS compliance and support for audit or assessment processes.

• Strong written and verbal communication skills, demonstrating professionalism.

• Preferred: current industry-recognized security certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Microsoft Certified: Azure Security Engineer Associate (AZ-500).

• Preferred: experience with mergers, acquisitions, or divestitures, including tenant-to-tenant migrations and identity consolidation.

• Preferred: experience in securing AI/ML platforms and services.

• Preferred: familiarity with CSPM/CNAPP platforms, container and Kubernetes security, and secrets management.

• Preferred: experience in establishing or enhancing product or application security programs.

• Preferred: experience in securing embedded, IoT, or payment-enabled products.

• Preferred: proficiency in scripting and automation using PowerShell, Python, or similar languages.

• Preferred: background in manufacturing, distribution, or field service environments.

• Must be eligible to work in the United States; work visa sponsorship is not currently available.

🏝️ Benefits

• Professional development opportunities.

• Training programs.

• Flexible work arrangements.

• Advancement prospects.

• Comprehensive health insurance.

• Dental coverage.

• Vision coverage.