Cyber Security Engineer, Cloud Security

This is a fully remote position, open to applicants in Pennsylvania.

📋 Description

• Oversee and protect cloud infrastructure and applications, primarily focusing on Azure.

• Ensure the security of containerized workloads and Kubernetes environments by implementing network policies, workload identities, runtime protection, and container image scanning.

• Take ownership of and enhance cloud security posture management (CSPM), consistently identifying and rectifying misconfigurations across various cloud environments.

• Secure infrastructure-as-code orchestration platforms by managing access control, secrets management, and deployment approval workflows for Terraform/OpenTofu pipelines.

• Manage and safeguard identities in Microsoft Entra ID utilizing Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.

• Analyze network diagrams and proposed connectivity modifications, offering security insights on segmentation and sensitive data flows while collaborating with IT and SRE teams to resolve issues.

• Administer Zero Trust network access and edge security tools to protect access to corporate and cloud resources.

• Oversee broader security solutions, including SIEM, DLP, E/XDR, and vulnerability management.

• Monitor security alerts, respond to incidents, escalate as necessary, and participate in the incident response on-call rotation.

• Conduct threat analyses, vulnerability assessments, and risk evaluations; document findings, manage mitigation efforts, and report status to leadership.

• Develop queries, scripts, integrations, and automated workflows to enhance cloud security operations.

• Work in collaboration with development teams to integrate security practices into the SDLC and CI/CD pipeline.

• Perform periodic cloud configuration and access reviews to ensure adherence to security standards.

• Engage in audits and assessments, supporting governance, risk management, and compliance (GRC) initiatives.

⛳️ Requirements

• Bachelor's degree in information security, computer science, or a related field is preferred; equivalent experience will be considered.

• A minimum of 5 years of experience in cloud security engineering or a related position.

• Extensive hands-on experience in securing cloud infrastructure and applications (Azure preferred; AWS experience is a plus).

• Practical network security experience with a solid understanding of network architecture, connectivity, segmentation, and firewall controls.

• Proven experience securing containerized workloads and Kubernetes environments (e.g., AKS), including network policies, workload identities, and runtime protection.

• Familiarity with cloud security posture management (CSPM) and the ability to remediate misconfigurations across cloud environments.

• Experience in securing IaC orchestration platforms, focusing on access control, secrets management, and deployment approval workflows (e.g., Terraform, OpenTofu).

• Proficiency with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.

• Experience with Zero Trust / SASE tools (e.g., Cloudflare Zero Trust, WAF, Gateway, or similar).

• Knowledge of security frameworks (NIST, ISO 27001, CIS) and compliance frameworks (HITRUST, PCI DSS).

• Demonstrated capability to conduct security assessments, manage vulnerabilities, and respond to incidents effectively.

• Strong understanding of operating systems (Windows, Linux) and endpoint security measures.

• Industry certifications such as CISSP, SSCP, Security+, or a cloud security certification (Azure/AWS) are preferred.

• Familiarity with GitOps tools (Argo, Flux) for secure deployments in Kubernetes environments.

• A background in Network or Systems Engineering is highly advantageous.

• Familiarity with programming or scripting languages is a plus.

🏝️ Benefits

• Employer-sponsored health, dental, vision, life, and disability insurance.

• Retirement plan with company contributions.

• Annual profit-sharing from the company.

• Personal development and training budget.

• An open, collaborative work environment.

• Comprehensive 2-week onboarding plan.

• A thorough mentorship program.